02a2f4f8f8700f344b0af8b8b8f91690_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

02a2f4f8f8700f344b0af8b8b8f91690_JaffaCakes118
Size

2.5MB
MD5

02a2f4f8f8700f344b0af8b8b8f91690
SHA1

243ddd8ffd559175302a52ee6feb5a84e6004ff1
SHA256

55057ebbd8bab7ca4d22d2cea30f912a5b66a9a0f3972bd41dcedd0887c7b696
SHA512

f05cfa6dac00ffed7f75e5c1aff89436e2c15e353fb87809c4879c62dd28275bbf287a8057baa5f1d07f6c5f5ca43c88e66774ca1d6781de3eb2df40f03c2562
SSDEEP

49152:4AaBLe6aiNGr0Yv4lLIjooQyTP3lZYTJ9Kn+:XaBeEkr0YvljooDETjKn+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a2f4f8f8700f344b0af8b8b8f91690_JaffaCakes118

Files

02a2f4f8f8700f344b0af8b8b8f91690_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cfdf7bcb70a75b554ebadf3a99a84169

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\BuildServer\1\work-trunk\core-repository\trunk\Repair\Release\RepairWoW.pdb

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

lstrcmpW
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalFlags
lstrlenA
GetThreadLocale
WritePrivateProfileStringW
LockFile
UnlockFile
DuplicateHandle
GetFullPathNameW
SetErrorMode
GetFileTime
GetStartupInfoW
RtlUnwind
RaiseException
UnhandledExceptionFilter
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
ExitThread
GetDriveTypeA
HeapSize
VirtualProtect
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetCurrentDirectoryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
GlobalLock
GlobalUnlock
FormatMessageW
FindResourceW
lstrlenW
MulDiv
GetComputerNameA
LoadLibraryExW
FindResourceExW
FreeResource
LoadResource
LockResource
SizeofResource
GetConsoleCP
SetLastError
LocalAlloc
LocalFree
GetVersionExA
SetFileTime
SetEndOfFile
RemoveDirectoryW
SetFilePointer
GetShortPathNameW
GetDiskFreeSpaceExW
FlushFileBuffers
FindNextFileW
ReadFile
GetFileSizeEx
GetSystemTimeAsFileTime
DeleteFileW
MoveFileW
SetCurrentDirectoryW
GetFileSize
GetFileAttributesExW
CreateFileA
Module32FirstW
Module32NextW
LoadLibraryW
InterlockedIncrement
CreateThread
InterlockedDecrement
GetDiskFreeSpaceW
Module32Next
Module32First
Process32Next
Process32First
IsBadStringPtrA
TlsSetValue
WideCharToMultiByte
MultiByteToWideChar
GetTempPathW
GetCurrentDirectoryW
GetModuleFileNameW
FindFirstFileW
FindClose
QueryPerformanceFrequency
TlsAlloc
SetThreadAffinityMask
FormatMessageA
GetComputerNameW
CreateProcessW
CreateFileW
CreateDirectoryW
GetLocalTime
OpenThread
SuspendThread
GetThreadContext
IsBadWritePtr
lstrcpynA
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentThread
QueryPerformanceCounter
TlsFree
TlsGetValue
GetThreadPriority
SetThreadPriority
ResumeThread
GlobalMemoryStatus
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WaitForSingleObject
SetEvent
InterlockedCompareExchange
LoadLibraryA
FreeLibrary
GetProcAddress
GetSystemInfo
SetUnhandledExceptionFilter
VirtualQuery
VirtualFree
VirtualAlloc
IsBadReadPtr
GetVersion
GetCurrentProcess
GetExitCodeProcess
TerminateProcess
WriteFile
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
Thread32Next
GetCurrentThreadId
GetModuleFileNameA
IsDebuggerPresent
OutputDebugStringA
Sleep
GetFileAttributesW
SetFileAttributesW
GetUserDefaultLangID
GlobalAlloc
GlobalFree
CreateMutexW
GetVolumeInformationW
CreateEventW
GetLastError
CloseHandle
GetVersionExW
GetModuleHandleW
GetTickCount
CreateProcessA
GetFileAttributesA
FreeEnvironmentStringsA
GetEnvironmentStrings

user32

UnregisterClassW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
IsRectEmpty
CharNextW
CharUpperW
ReleaseCapture
SetCapture
DestroyMenu
LoadCursorW
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
GetWindowThreadProcessId
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
UpdateWindow
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
PtInRect
GetMenu
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetSysColor
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
GetMenuState
GetMenuItemID
RegisterClipboardFormatW
GetMenuItemCount
GetSubMenu
PostThreadMessageW
GetClassNameW
GetActiveWindow
CopyRect
GetDC
ReleaseDC
FillRect
TrackMouseEvent
GetWindowTextW
IsWindowEnabled
DrawTextW
DrawIcon
SetRect
ShowWindowAsync
SetForegroundWindow
FindWindowW
CopyImage
DefWindowProcW
GetWindowLongW
SetWindowLongW
CallWindowProcW
BeginPaint
EndPaint
LoadBitmapW
OffsetRect
IsWindow
IsWindowVisible
GetParent
GetWindowRect
RedrawWindow
LoadIconW
InvalidateRect
GetClientRect
PostMessageW
EnableWindow
SetWindowPos
SetWindowRgn
SendMessageW

gdi32

GetViewportExtEx
GetWindowExtEx
GetRgnBox
GetTextColor
GetBkColor
DPtoLP
GetMapMode
CreateRectRgnIndirect
CreateBitmap
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
CreateEllipticRgn
GetClipBox
SetMapMode
RestoreDC
SaveDC
GetDeviceCaps
CreateDIBSection
SetBkColor
CreateSolidBrush
SelectObject
SetTextColor
SetBkMode
DeleteDC
GetPixel
CreateCompatibleBitmap
DeleteObject
GetStockObject
BitBlt
CreateCompatibleDC
CreatePolygonRgn
CreateFontIndirectW
GetObjectW
PtVisible

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

AccessCheck
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegSetValueExW
RegOpenKeyExW
RegOpenKeyExA
SetFileSecurityW
MapGenericMask
GetUserNameW
OpenThreadToken
DuplicateToken
GetSecurityDescriptorDacl
GetSecurityDescriptorOwner
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
FreeSid
RegOpenKeyW
RegQueryValueExW
RegCloseKey
OpenProcessToken

shell32

ShellExecuteW

comctl32

_TrackMouseEvent
ord17

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CLSIDFromString
OleFlushClipboard
CoRegisterMessageFilter
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CLSIDFromProgID
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
CoRevokeClassObject
OleIsCurrentClipboard

oleaut32

SysAllocString
OleCreateFontIndirect
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear
OleLoadPicture

ws2_32

WSAStartup
WSACleanup

wininet

InternetCrackUrlA
HttpOpenRequestA
InternetSetCookieW
HttpSendRequestA
InternetOpenA
InternetSetStatusCallbackA
InternetConnectA
InternetSetOptionA
HttpQueryInfoA
InternetReadFileExA
InternetCloseHandle

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfdf7bcb70a75b554ebadf3a99a84169

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 243KB - Virtual size: 243KB

.data Size: 1.1MB - Virtual size: 1.1MB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 92KB - Virtual size: 91KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 243KB - Virtual size: 243KB

.data
Size: 1.1MB - Virtual size: 1.1MB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 92KB - Virtual size: 91KB