0eb178148a2c609d8373bc86453fa6ec_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
0eb178148a2c609d8373bc86453fa6ec_JaffaCakes118
Size 539KB
Sample241003-jvxezswfph
SHA256 251a5464de2d4ba4d25937952f87b254cd2d039e82fb64d1b40097dc301960ba
MD5 0eb178148a2c609d8373bc86453fa6ec
SHA1 0d41712c3349880bc06481110ca6dc826e82e9f2
SHA512 c5c2ebd2c379b16a5bcff8f9ecf0a94fe013c1ca14bd388a1ec979d0370dca4e547864e6cb7d26ebae6bce3ffd6b0769624d777fe1991f03610aa2adbb42d26d
SSDEEP 12288:IgIlYJX8IFSBNG9REycaxCT7IkRNCobgVrYMtArYJg+8:nIo7gBE9Bcwq7IkRNCobm+YJ58
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DLL.dll
unpack001/EXE.exe

File Explorer

0eb178148a2c609d8373bc86453fa6ec_JaffaCakes118

.rar 539KB
DLL.dll

.dll 692KB
EXE.exe

.exe 712KB
Read Me.txt

1KB

0eb178148a2c609d8373bc86453fa6ec_JaffaCakes118

SHA256 251a5464de2d4ba4d25937952f87b254cd2d039e82fb64d1b40097dc301960ba
MD5 0eb178148a2c609d8373bc86453fa6ec
SHA1 0d41712c3349880bc06481110ca6dc826e82e9f2
SHA512 c5c2ebd2c379b16a5bcff8f9ecf0a94fe013c1ca14bd388a1ec979d0370dca4e547864e6cb7d26ebae6bce3ffd6b0769624d777fe1991f03610aa2adbb42d26d
SSDEEP 12288:IgIlYJX8IFSBNG9REycaxCT7IkRNCobgVrYMtArYJg+8:nIo7gBE9Bcwq7IkRNCobm+YJ58
MD5 SHA1 SHA512 SSDEEP

DLL.dll

IMPHASH c7b23b4d1a3c8dea891588178c0ebb39
SHA256 1329772b69da967ae3179d7a3cf5702021719ae626ab9f70c93b93b85a6f9f07
MD5 de0448b31781c9489b819ca84cbc5188
SHA1 cd17602e2dc13d0baae11c7bf959949375a716d3
SHA512 a76d48a1ae9d1db58502c6e89107420f4bdf9df4d6cce50c926599fca17f62fb3d72ca743659a317aa021d2eb0694101d81842c83a8a5f81852cb51d108c9139
SSDEEP 12288:VNtmEMSw9hCHL/rL7FC+HqPTXsCL76cMg:VNEhI/vJC+HMLjMg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

325985

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

winmm

midiStreamRestart midiStreamClose midiOutReset midiStreamStop midiOutUnprepareHeader midiStreamOut midiOutPrepareHeader midiStreamProperty midiStreamOpen waveOutOpen waveOutUnprepareHeader waveOutPrepareHeader waveOutWrite waveOutPause waveOutReset waveOutClose waveOutGetNumDevs

ws2_32

WSAAsyncSelect ioctlsocket getpeername closesocket WSACleanup inet_ntoa recv recvfrom accept

kernel32

SetLastError GetTimeZoneInformation GetVersion IsBadReadPtr CompareStringW CompareStringA GetStringTypeW GetStringTypeA SetUnhandledExceptionFilter IsBadWritePtr MultiByteToWideChar LCMapStringW LCMapStringA SetEnvironmentVariableA VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetACP HeapSize RaiseException GetLocalTime GetSystemTime RtlUnwind GetOEMCP GetCPInfo GetProcessVersion SetErrorMode GlobalFlags GetCurrentThread GetFileTime TlsGetValue LocalReAlloc TlsSetValue TlsFree GlobalHandle TlsAlloc LocalAlloc lstrcmpA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpiA SetEndOfFile UnlockFile LockFile FlushFileBuffers DuplicateHandle lstrcpynA FileTimeToLocalFileTime FileTimeToSystemTime LocalFree WideCharToMultiByte InterlockedDecrement InterlockedIncrement TerminateProcess GetCurrentProcess GetFileSize SetFilePointer GetSystemDirectoryA CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile ReadFile GetLastError WaitForMultipleObjects CreateFileA SetEvent FindResourceA LoadResource LockResource GetModuleFileNameA GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetFullPathNameA FreeLibrary LoadLibraryA lstrlenA GetVersionExA WritePrivateProfileStringA CreateThread CreateEventA Sleep GlobalAlloc GlobalLock GlobalUnlock FindFirstFileA FindClose GetFileAttributesA SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount WaitForSingleObject CloseHandle IsBadCodePtr SetStdHandle InterlockedExchange VirtualAlloc

user32

EnumDisplaySettingsA ClientToScreen EnableMenuItem GetSubMenu GetDlgCtrlID CreateAcceleratorTableA CreateMenu ModifyMenuA AppendMenuA CreatePopupMenu DrawIconEx CreateIconFromResource CreateIconFromResourceEx RegisterClipboardFormatA SetRectEmpty DispatchMessageA GetMessageA WindowFromPoint DrawFocusRect DrawEdge DrawFrameControl LoadIconA TranslateMessage SystemParametersInfoA ShowCursor GetDesktopWindow LoadImageA ShowWindow IsWindowEnabled TranslateAcceleratorA GetDlgItem CopyAcceleratorTableA PostQuitMessage IsZoomed GetSystemMenu DeleteMenu GetClassInfoA DefWindowProcA GetClassNameA GetMenu SetMenu PeekMessageA IsIconic SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos InflateRect SetRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect IsRectEmpty ReleaseDC IsChild DestroyMenu SetForegroundWindow GetWindowRect EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBoxA GetCursorPos GetSystemMetrics EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard wsprintfA GetWindowTextA EnumWindows GetKeyState GetSysColorBrush GetWindowTextLengthA CharUpperA GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA DestroyWindow CreateDialogIndirectParamA EndDialog GetNextDlgTabItem GetWindowPlacement RegisterWindowMessageA GetForegroundWindow GetLastActivePopup GetMessageTime RemovePropA CallWindowProcA GetPropA UnhookWindowsHookEx SetPropA GetClassLongA CallNextHookEx SetWindowsHookExA CreateWindowExA GetMenuItemID GetMenuItemCount RegisterClassA GetScrollPos AdjustWindowRectEx MapWindowPoints SendDlgItemMessageA ScrollWindowEx IsDialogMessageA SetWindowTextA MoveWindow CheckMenuItem SetMenuItemBitmaps GetMenuState GetMenuCheckMarkDimensions UnregisterClassA LoadStringA

gdi32

GetClipBox ScaleWindowExtEx SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetTextColor SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC DeleteObject CreateDIBitmap GetSystemPaletteEntries CreatePalette StretchBlt SelectPalette RealizePalette GetDIBits GetWindowExtEx GetViewportOrgEx GetWindowOrgEx BeginPath EndPath PathToRegion CreateEllipticRgn CreateRoundRectRgn GetTextColor GetBkMode GetBkColor GetROP2 GetStretchBltMode GetPolyFillMode CreateCompatibleBitmap CreateDCA CreateBitmap ExcludeClipRect SelectObject GetObjectA CreatePen PatBlt FillRgn CreateRectRgn CombineRgn CreateSolidBrush GetStockObject CreateFontIndirectA EndPage EndDoc DeleteDC StartDocA StartPage BitBlt CreateCompatibleDC Ellipse Rectangle LPtoDP DPtoLP GetCurrentObject RoundRect GetTextExtentPoint32A GetDeviceCaps CreateRectRgnIndirect SetBkColor MoveToEx LineTo ExtSelectClipRgn GetViewportExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextMetricsA SelectClipRgn CreatePolygonRgn SetStretchBltMode GetClipRgn

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegOpenKeyExA RegSetValueExA RegQueryValueA RegCreateKeyExA RegCloseKey

shell32

ShellExecuteA Shell_NotifyIconA

ole32

OleInitialize OleUninitialize CLSIDFromString

oleaut32

LoadTypeLi RegisterTypeLi UnRegisterTypeLi

comctl32

ord17 ImageList_Destroy

comdlg32

GetSaveFileNameA ChooseColorA GetFileTitleA GetOpenFileNameA

EXE.exe

IMPHASH 5f67c97e1f7ef1304fa50965ef767db9
SHA256 b7d742dbc987a40614914dc2696f41f213be4d00cdd34d97e1675e373c7d5adf
MD5 ce4d87e069c38f18e3d3578daedccd6e
SHA1 a5de9dde2f50db2e11b6fd2b2c84fe2568152885
SHA512 d43f2270c0267b10f5cbac0f1492c08421615df474052d9beb3e7dff7a4db598ce9f9dea7bafacf2095f85e482c1ed1d5b3017c41863bc290ba45fc1c87169d5
SSDEEP 12288:+qXXXOm/AgiYI7IYk/Mw5hHUtZ5lsfJNojn:+qXHOm/AgiJIuQh0tZ5Kfu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

411518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

ws2_32

WSAAsyncSelect ioctlsocket getpeername closesocket WSACleanup inet_ntoa recv recvfrom accept

kernel32

MultiByteToWideChar SetLastError GetTimeZoneInformation GetVersion IsBadReadPtr CompareStringW CompareStringA GetStringTypeW SetUnhandledExceptionFilter IsBadWritePtr VirtualAlloc LCMapStringW LCMapStringA SetEnvironmentVariableA VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter GetACP HeapSize RaiseException GetLocalTime GetSystemTime RtlUnwind GetStartupInfoA GetOEMCP GetCPInfo GetProcessVersion SetErrorMode GlobalFlags GetCurrentThread GetFileTime TlsGetValue LocalReAlloc TlsSetValue TlsFree GlobalHandle TlsAlloc LocalAlloc lstrcmpA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpiA SetEndOfFile UnlockFile LockFile FlushFileBuffers DuplicateHandle lstrcpynA FileTimeToLocalFileTime FileTimeToSystemTime LocalFree WideCharToMultiByte InterlockedDecrement InterlockedIncrement TerminateProcess GetCurrentProcess GetFileSize SetFilePointer CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile ReadFile GetLastError WaitForMultipleObjects CreateFileA SetEvent FindResourceA LoadResource LockResource GetModuleFileNameA GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetFullPathNameA FreeLibrary LoadLibraryA lstrlenA GetVersionExA WritePrivateProfileStringA CreateThread CreateEventA Sleep ExpandEnvironmentStringsA GlobalAlloc GlobalLock GlobalUnlock FindFirstFileA FindClose GetFileAttributesA DeleteFileA SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount CreateProcessA WaitForSingleObject CloseHandle IsBadCodePtr SetStdHandle InterlockedExchange GetStringTypeA

user32

EnumDisplaySettingsA ClientToScreen EnableMenuItem GetSubMenu GetDlgCtrlID CreateAcceleratorTableA CreateMenu ModifyMenuA AppendMenuA CreatePopupMenu DrawIconEx CreateIconFromResource CreateIconFromResourceEx RegisterClipboardFormatA SetRectEmpty DispatchMessageA GetMessageA WindowFromPoint DrawFocusRect DrawEdge DrawFrameControl LoadIconA TranslateMessage SystemParametersInfoA GetDesktopWindow LoadImageA ShowWindow IsWindowEnabled TranslateAcceleratorA GetKeyState GetDlgItem PostQuitMessage IsZoomed GetSystemMenu DeleteMenu GetClassInfoA DefWindowProcA GetClassNameA GetMenu SetMenu PeekMessageA IsIconic SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos InflateRect SetRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect IsRectEmpty ReleaseDC IsChild DestroyMenu SetForegroundWindow GetWindowRect EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBoxA GetCursorPos GetSystemMetrics EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard wsprintfA WaitForInputIdle GetWindowTextA CopyAcceleratorTableA UnregisterClassA GetSysColorBrush GetWindowTextLengthA CharUpperA GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA DestroyWindow CreateDialogIndirectParamA EndDialog GetNextDlgTabItem GetWindowPlacement RegisterWindowMessageA GetForegroundWindow GetLastActivePopup GetMessageTime RemovePropA CallWindowProcA GetPropA UnhookWindowsHookEx SetPropA GetClassLongA CallNextHookEx SetWindowsHookExA CreateWindowExA GetMenuItemID GetMenuItemCount RegisterClassA GetScrollPos AdjustWindowRectEx MapWindowPoints SendDlgItemMessageA ScrollWindowEx IsDialogMessageA SetWindowTextA MoveWindow CheckMenuItem SetMenuItemBitmaps GetMenuState GetMenuCheckMarkDimensions LoadStringA

gdi32

GetClipBox ScaleWindowExtEx SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetTextColor SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC GetSystemPaletteEntries CreatePalette StretchBlt SelectPalette RealizePalette GetDIBits GetWindowExtEx GetViewportOrgEx GetWindowOrgEx BeginPath EndPath PathToRegion CreateEllipticRgn CreateRoundRectRgn GetTextColor GetBkMode GetBkColor GetROP2 GetStretchBltMode GetPolyFillMode CreateCompatibleBitmap CreateDCA CreateBitmap ExcludeClipRect SelectObject GetObjectA CreatePen PatBlt FillRgn CreateRectRgn CombineRgn CreateSolidBrush GetStockObject CreateFontIndirectA EndPage EndDoc DeleteDC StartDocA StartPage BitBlt CreateCompatibleDC Ellipse Rectangle LPtoDP DPtoLP GetCurrentObject RoundRect GetTextExtentPoint32A GetDeviceCaps CreateRectRgnIndirect SetBkColor MoveToEx LineTo ExtSelectClipRgn GetViewportExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextMetricsA CreateDIBitmap SelectClipRgn CreatePolygonRgn GetClipRgn SetStretchBltMode DeleteObject

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegSetValueExA RegCreateKeyA RegDeleteValueA RegDeleteKeyA RegQueryValueA RegCreateKeyExA RegCloseKey

shell32

ShellExecuteA Shell_NotifyIconA

ole32

OleInitialize OleUninitialize CLSIDFromString

oleaut32

LoadTypeLi RegisterTypeLi UnRegisterTypeLi

comctl32

ord17 ImageList_Destroy

comdlg32

GetSaveFileNameA ChooseColorA GetFileTitleA GetOpenFileNameA

0eb178148a2c609d8373bc86453fa6ec_JaffaCakes118

DLL.dll

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

generic

EXE.exe

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

generic

Read Me.txt