11cf05d24be3ecd761385459dfa7cdf9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

11cf05d24be3ecd761385459dfa7cdf9_JaffaCakes118
Size

1.7MB
MD5

11cf05d24be3ecd761385459dfa7cdf9
SHA1

0b4ba4bde922f2f64e8c60d6db7d5638f6d98599
SHA256

75a877455ba03e6a1b155da65dea7a5c61b131fc4be00be8316bb95369bb26c3
SHA512

d725b73528bb277a5ef6a00ab54169c8fb29700fb956da8cc6f5136aa067845ede609fee07ac86bd55387dec204ee54dad00f5fb6e325d9023997cae861f43a8
SSDEEP

24576:aZBCFZPe7rXXbmCAY/sBieuSeJr24x1hhNHsej+SvrPzVgxY1CPj2:BQ7X1bNl+SvrPR1CPj2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11cf05d24be3ecd761385459dfa7cdf9_JaffaCakes118

Files

11cf05d24be3ecd761385459dfa7cdf9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fe76f84b4483a097d93e03c432ddaae8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\My Projects\Macro Expert\Output\MacroPlayer.pdb

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winmm

mixerGetControlDetailsW
timeGetTime
mixerGetNumDevs
mixerSetControlDetails
mixerClose
mciSendCommandW
PlaySoundW
timeEndPeriod
timeBeginPeriod
mixerGetLineControlsW
mixerGetLineInfoW

wininet

InternetCanonicalizeUrlW
InternetCrackUrlW
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
DeleteUrlCacheEntryW
FindCloseUrlCache
InternetCloseHandle
InternetSetStatusCallbackW
InternetSetOptionW
HttpAddRequestHeadersW
HttpQueryInfoW
InternetOpenW
InternetReadFile
InternetReadFileExA
InternetErrorDlg
HttpSendRequestW
InternetQueryOptionW
HttpOpenRequestW
InternetConnectW

surekeyboardstate

SureKeyboard

playerassistant

ord5
ord2
ord1
ord4
ord3
ord6

kernel32

SearchPathA
GetTimeFormatW
GetDateFormatW
GetModuleFileNameW
RemoveDirectoryW
FreeResource
MulDiv
GetVersionExA
lstrcmpW
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetThreadPriority
SuspendThread
GetThreadLocale
GetUserDefaultLCID
CompareStringA
LoadLibraryExW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GlobalGetAtomNameW
FlushFileBuffers
LockFile
UnlockFile
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetFileSizeEx
SetErrorMode
GetStartupInfoW
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
GetTimeZoneInformation
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
HeapSize
RaiseException
ExitThread
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LocalAlloc
SetEnvironmentVariableA
CreateFileA
GetExitCodeProcess
CreateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SetSystemPowerState
TerminateThread
CreateProcessW
IsDBCSLeadByte
SetLocalTime
GlobalUnlock
GlobalLock
ResumeThread
MoveFileW
GlobalAlloc
GlobalFree
DisconnectNamedPipe
PeekNamedPipe
ConnectNamedPipe
CreateFileMappingW
CreateNamedPipeW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
SetEndOfFile
CancelIo
OpenEventW
FormatMessageW
ResetEvent
SetEvent
ReleaseSemaphore
CreateSemaphoreW
CreateEventW
SetCurrentDirectoryW
GetCurrentDirectoryW
LocalFree
GetLocalTime
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetTempFileNameW
GetTempPathW
GetVersionExW
GetCurrentProcess
SetPriorityClass
DeviceIoControl
GetVersion
CreateRemoteThread
GetModuleHandleA
TerminateProcess
GetProcessTimes
OpenProcess
GetCurrentProcessId
WaitNamedPipeW
GetSystemDirectoryW
GetCurrentThreadId
GetProcAddress
LoadLibraryW
FreeLibrary
GetModuleHandleW
GetWindowsDirectoryW
FindClose
FindNextFileW
FindFirstFileW
SetFileAttributesW
GetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteFileW
CopyFileW
CompareFileTime
GetFileTime
OutputDebugStringW
lstrlenA
SetLastError
CreateDirectoryW
GetACP
CloseHandle
WriteFile
CreateFileW
WideCharToMultiByte
MultiByteToWideChar
SetFilePointer
ReadFile
GetFileSize
lstrlenW
InterlockedExchange
Beep
WaitForSingleObject
GetLastError
Sleep
GetTickCount
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
GetProcessHeap
GetLocaleInfoW

user32

InsertMenuItemW
LoadAcceleratorsW
DestroyMenu
ReuseDDElParam
UnpackDDElParam
CharUpperW
GetSysColorBrush
UnregisterClassW
MessageBeep
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowTextLengthW
SetWindowTextW
SetDlgItemTextW
SendDlgItemMessageW
UnhookWindowsHookEx
ShowOwnedPopups
GetDlgItem
GetMenuState
GetMenuItemID
GetSubMenu
ShowCursor
IsDialogMessageW
GetMenuStringW
LoadMenuW
SetScrollInfo
SetScrollPos
GetScrollPos
GetScrollInfo
GetComboBoxInfo
ToAsciiEx
SetCursor
DestroyCursor
GetSystemMenu
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
MonitorFromWindow
GetMonitorInfoW
SetWindowRgn
GetCapture
DrawFocusRect
GetClassLongW
SetClassLongW
GetNextDlgGroupItem
SetCapture
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
MapWindowPoints
EndDialog
DrawFrameControl
GetIconInfo
DrawIconEx
DrawAnimatedRects
BringWindowToTop
GetDlgCtrlID
IsWindowEnabled
FindWindowW
PostThreadMessageW
FillRect
ClientToScreen
GetWindowDC
PtInRect
WaitForInputIdle
mouse_event
GetKeyboardLayout
VkKeyScanExW
CreatePopupMenu
VkKeyScanW
GetClipboardData
IsClipboardFormatAvailable
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
SetCursorPos
ExitWindowsEx
WindowFromPoint
LoadCursorW
LoadIconW
LockWindowUpdate
EnumThreadWindows
SystemParametersInfoW
DestroyIcon
MapVirtualKeyW
LoadStringW
MessageBoxW
GetKeyState
RegisterHotKey
UnregisterHotKey
CallWindowProcW
GetPropW
RemovePropW
SetPropW
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
SendMessageTimeoutW
RegisterWindowMessageW
SetFocus
GetWindow
ScreenToClient
GetParent
GetWindowTextW
GetClassNameW
EnumWindows
SetForegroundWindow
UpdateWindow
ReleaseCapture
InvalidateRect
GetFocus
IsWindowVisible
SetWindowPos
wsprintfW
keybd_event
GetWindowThreadProcessId
AttachThreadInput
GetForegroundWindow
GetSystemMetrics
ReleaseDC
GetDC
GetClientRect
LoadBitmapW
PeekMessageW
DefWindowProcW
DestroyWindow
SetWindowLongW
CreateWindowExW
RegisterClassExW
LoadImageW
GetSysColor
CopyRect
EnableWindow
DispatchMessageW
TranslateMessage
GetMessageW
OffsetRect
KillTimer
SetTimer
GetDesktopWindow
SendMessageW
MoveWindow
ShowWindow
IsIconic
IsZoomed
GetWindowPlacement
GetCursorPos
GetWindowLongW
PostMessageW
GetWindowRect
IsWindow
SetRectEmpty
TranslateAcceleratorW
PostQuitMessage
RegisterClipboardFormatW
CharNextW
SetWindowContextHelpId
MapDialogRect
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
ValidateRect
InflateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
EndPaint
BeginPaint
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
BlockInput
GetAsyncKeyState
GetDoubleClickTime
TrackPopupMenu
SetMenu
GetClassInfoW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
ToAscii
DeferWindowPos
GetNextDlgTabItem

gdi32

GetDIBColorTable
RealizePalette
SetTextCharacterExtra
SetDIBColorTable
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateRectRgnIndirect
GetMapMode
GetRgnBox
GetBkColor
GetTextColor
GetClipBox
CreateFontIndirectW
DPtoLP
OffsetRgn
RestoreDC
ExcludeClipRect
SaveDC
GetTextExtentPointW
OffsetWindowOrgEx
Ellipse
SetBkMode
SetStretchBltMode
GetDeviceCaps
RoundRect
MoveToEx
LineTo
CreateRectRgn
GetDIBits
CombineRgn
CreateBitmap
GetTextExtentPoint32W
Rectangle
CreateSolidBrush
SetBkColor
SetTextColor
GetTextMetricsW
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectPalette
CreateDIBSection
GdiFlush
GetPixel
GetSystemPaletteEntries
SelectObject
DeleteDC
CreateCompatibleBitmap
SetMapMode
StretchBlt
BitBlt
CreateCompatibleDC
GetObjectW
GetStockObject
CreatePen
DeleteObject
IntersectClipRect
GetCharABCWidthsW
GetCharWidthW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegQueryValueW
RegOpenKeyW
RegEnumKeyW
ControlService
StartServiceW
DeleteService
OpenServiceW
CloseServiceHandle
CreateServiceW
RegOpenKeyExW
RegQueryValueExW
OpenSCManagerW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
SetSecurityInfo
SetEntriesInAclW
BuildTrusteeWithSidW
AddAce
DeleteAce
CopySid
GetLengthSid
EqualSid
GetAce
GetAclInformation
GetSecurityInfo
RegSetValueExW
FreeSid
AllocateAndInitializeSid
RegCreateKeyExW
DuplicateTokenEx
CreateProcessAsUserW
LookupAccountSidW
GetTokenInformation
OpenProcessToken
RegCloseKey

shell32

SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
DragFinish
DragQueryFileW
SHGetSpecialFolderPathW

shlwapi

PathCompactPathW
StrCmpW
PathFindExtensionW
StrStrW
StrCmpIW
SHDeleteKeyW
PathIsRootW
StrStrIW
PathFileExistsW
PathRemoveExtensionW
SHAutoComplete
PathFileExistsA
ChrCmpIW
UrlUnescapeW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
SHDeleteEmptyKeyW

oledlg

OleUIBusyW

ole32

CoCreateInstance
CoSetProxyBlanket
CoInitialize
CoUninitialize
CoUnmarshalInterface
CoMarshalInterThreadInterfaceInStream
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CreateStreamOnHGlobal
CoGetInterfaceAndReleaseStream
OleRun
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoInitializeEx
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoDisconnectObject
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SysStringLen
VarUdateFromDate
VarR8FromCy
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VarDateFromStr
VariantCopy
SafeArrayGetElemsize
SafeArrayDestroy
OleCreateFontIndirect
LoadTypeLi
SysAllocStringLen
VariantChangeType
VariantClear
VariantInit
SysFreeString
SafeArrayGetDim
SysAllocString
GetErrorInfo

wsock32

sendto
closesocket
WSAGetLastError
select
htons
recvfrom
setsockopt
inet_addr
ioctlsocket
WSASetLastError
WSACleanup
WSAStartup
socket
WSACancelAsyncRequest
gethostbyname
WSAAsyncGetHostByName
__WSAFDIsSet

gdiplus

GdipSaveImageToStream
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipCloneImage
GdipGetDC
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdiplusShutdown
GdipReleaseDC
GdipFree

ddraw

DirectDrawCreate

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

wtsapi32

WTSSendMessageW

psapi

EnumProcesses
GetModuleBaseNameW
GetModuleFileNameExW
EnumProcessModules

mpr

WNetAddConnection3W
WNetCancelConnection2W
WNetConnectionDialog1W

ws2_32

WSASocketW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 136KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yjdnrxs
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fe76f84b4483a097d93e03c432ddaae8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

winmm

wininet

surekeyboardstate

playerassistant

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

wsock32

gdiplus

ddraw

userenv

wtsapi32

psapi

mpr

ws2_32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 236KB - Virtual size: 236KB

.data Size: 61KB - Virtual size: 216KB

.rsrc Size: 56KB - Virtual size: 56KB

.mdata Size: 136KB - Virtual size: 164KB

yjdnrxs Size: - Virtual size: 4KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 236KB - Virtual size: 236KB

.data
Size: 61KB - Virtual size: 216KB

.rsrc
Size: 56KB - Virtual size: 56KB

.mdata
Size: 136KB - Virtual size: 164KB

yjdnrxs
Size: - Virtual size: 4KB