114289536c301af078f176d30cf5cc79_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

114289536c301af078f176d30cf5cc79_JaffaCakes118
Size

1.4MB
MD5

114289536c301af078f176d30cf5cc79
SHA1

ddf82304885dc08869979a85fe02d1f17b072e3e
SHA256

0843f0ff9e212958a0e73e7385c2bf5d25c537d12177455c2b0b164b3150e978
SHA512

ea44b6c00c1a04b48ffe797dd928b7252f5552127f31e12601548f7963c304b3c305b1df587a76092420941416356102bf2b7e5e335ff45ea3746fe34dd63cc7
SSDEEP

24576:+DY40kNWPWeibR4cI4lSDDax4Gwyqj50f0VH6qBEjOHzU3q5Hqfk+6o:hMMDax4Gwyq40VH6qBEjuo39ff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
114289536c301af078f176d30cf5cc79_JaffaCakes118

Files

114289536c301af078f176d30cf5cc79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5505e2170bac4c6bd7ca75a70a9cb575

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipFree
GdipDeleteGraphics
GdipDrawImageRectI
GdipGetImageHeight
GdipGetImageWidth
GdipSetPageUnit
GdipDisposeImage
GdipCreateFromHDC
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipAlloc

turbine

?WritePort@CTurbine@@QAEHPAXPAEKK@Z
?ClosePort@CTurbine@@QAEHPAX@Z
??0CTurbine@@QAE@XZ
?ParQueryDeviceId@CTurbine@@QAEHPAXPADKK@Z
?OpenPort@CTurbine@@QAEPAXPBD@Z
?ReadPort@CTurbine@@QAEHPAXPADKK@Z
??1CTurbine@@UAE@XZ

kernel32

GetFileTime
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetCurrentDirectoryA
SizeofResource
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileSize
RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
SetStdHandle
GetFileType
HeapSize
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileAttributesA
GetThreadLocale
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
lstrcpynA
GlobalUnlock
MulDiv
GetModuleHandleA
SetLastError
LocalFree
FindResourceA
LoadResource
LockResource
GlobalFree
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
FormatMessageA
SetErrorMode
GetVolumeInformationA
FreeLibrary
LoadLibraryA
GetProcAddress
SetCurrentDirectoryA
WideCharToMultiByte
GetVersionExA
DeviceIoControl
GetLastError
MultiByteToWideChar
InterlockedDecrement
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
lstrlenA
CreateProcessA
WritePrivateProfileStringA
GetExitCodeProcess
OpenMutexA
CreateMutexA
ReleaseMutex
CreateFileA
CloseHandle
ReadFile
Sleep
GetModuleFileNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
InterlockedExchange
GetProfileStringA
GetTickCount

user32

LoadStringA
LoadCursorA
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
CopyRect
GetTopWindow
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
GetDesktopWindow
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowContextHelpId
EndDialog
IsWindow
CreateDialogIndirectParamA
DestroyWindow
WaitMessage
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
SetCursor
UnhookWindowsHookEx
MapDialogRect
SetWindowPos
ShowWindow
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetWindowLongA
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
PostQuitMessage
SetTimer
KillTimer
GetNextDlgTabItem
IsChild
InvalidateRect
GetWindowRect
MessageBeep
GetParent
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
PtInRect
GetClassNameA
CharUpperA
RemovePropA
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
EnableWindow
PeekMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
LoadBitmapA
PostMessageA
MessageBoxA
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetMenuState

gdi32

DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
PatBlt
SetMapMode
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
IntersectClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetTextColor
SetBkMode
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
CreateFontA
StartDocA
StartPage
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
EndPage
EndDoc
CreateSolidBrush
GetDeviceCaps

comdlg32

PrintDlgA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

WritePrinter
StartPagePrinter
StartDocPrinterA
OpenPrinterA
EnumPortsA
DeletePrinter
SetPrinterA
EnumPrintersA
GetPrinterDriverA
DocumentPropertiesA
EndDocPrinter
ClosePrinter
EndPagePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17

oledlg

ord8

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoCreateInstance
CLSIDFromString
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
CoSetProxyBlanket
CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoGetClassObject
CoRegisterMessageFilter

olepro32

ord253

oleaut32

VariantChangeType
SysAllocStringByteLen
VariantCopy
VariantTimeToSystemTime
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
SysAllocStringLen
VariantClear
SysAllocString
SysFreeString

wsock32

select
recv
send
WSAStartup
htons
socket
connect
setsockopt
WSACleanup
WSAGetLastError
gethostname
gethostbyname
inet_addr
inet_ntoa
WSAAsyncSelect
closesocket
accept
ioctlsocket
bind
htonl
sendto
recvfrom
WSASetLastError

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5505e2170bac4c6bd7ca75a70a9cb575

Headers

File Characteristics

Imports

gdiplus

turbine

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 160KB - Virtual size: 157KB

.data Size: 28KB - Virtual size: 109KB

.rsrc Size: 36KB - Virtual size: 34KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 160KB - Virtual size: 157KB

.data
Size: 28KB - Virtual size: 109KB

.rsrc
Size: 36KB - Virtual size: 34KB