163558da2c517067e0f5f9926df9189a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

163558da2c517067e0f5f9926df9189a_JaffaCakes118
Size

128KB
MD5

163558da2c517067e0f5f9926df9189a
SHA1

6f2cbccc478ecd8be3a2f1511d4f3b86717dab45
SHA256

753cdb63b0d2eb1acbb8f5734d488ce9986886f3fe94490ec62d8135ad10de37
SHA512

2ca027623cbec615e394b0c09de219d0ce7ccd87d1548165ae765c785536cfb30e70e79a155bd682514a9f31f254912b12a5dd935172c131a85abb1159021cd2
SSDEEP

3072:ch8tBbk82/0wHum8aZg2AMQLSR3vw+uFRdxdYuhvqD3iA:ch8t1k8YXHcaQj+mxdY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
163558da2c517067e0f5f9926df9189a_JaffaCakes118

Files

163558da2c517067e0f5f9926df9189a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ca365c44aee3ff5056d7aea00f8e8f1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateWaitableTimerW
LoadLibraryA
FindCloseChangeNotification
MoveFileWithProgressW
ResumeThread
GlobalSize
ReadConsoleOutputCharacterA
LocalFlags
lstrlenA
IsValidLocale
GetStringTypeW
GetConsoleInputExeNameA
GetModuleHandleA
UpdateResourceA
QueryInformationJobObject
InitAtomTable
GetConsoleAliasesA
GetFullPathNameA
GlobalCompact
OpenProcess
GetAtomNameW
GlobalLock
UnlockFile
OpenFileMappingA
VerLanguageNameW
Heap32ListNext
GetExitCodeProcess
GetVersion
SetProcessPriorityBoost
DeleteTimerQueue
FindResourceW
VirtualFree
WriteConsoleInputVDMW
SetThreadPriorityBoost
BuildCommDCBAndTimeoutsW
GetSystemTime
GetHandleInformation
GetConsoleAliasesW
FindFirstVolumeW
OpenEventA
FindNextVolumeW
MoveFileWithProgressA
OpenFile
ReadConsoleA
OpenFileMappingW
SetConsoleMaximumWindowSize
GetBinaryTypeA
GetConsoleMode
FlushConsoleInputBuffer
CancelWaitableTimer
GetPrivateProfileStringA
Thread32First
IsBadReadPtr
WritePrivateProfileStringA
GenerateConsoleCtrlEvent
GetShortPathNameA
GetConsoleCursorInfo
DuplicateConsoleHandle
GetStringTypeExA
VirtualAlloc
GetProcAddress
GetNamedPipeInfo
DeviceIoControl
Heap32Next
ScrollConsoleScreenBufferA
QueryDosDeviceW
GetNamedPipeHandleStateA
SetHandleCount
GetVDMCurrentDirectories
QueueUserWorkItem
WritePrivateProfileStructA
IsBadHugeReadPtr
GetFileAttributesA
OpenMutexW
SetFilePointer
SetCalendarInfoA
SetLastError
TransactNamedPipe
SetErrorMode
VerLanguageNameA

user32

GetGUIThreadInfo
MessageBoxExA
SetWindowPos
DdeQueryStringW
CheckRadioButton
SendDlgItemMessageA
TranslateAcceleratorA
DdeQueryNextServer
RegisterClipboardFormatW
VkKeyScanA
UnregisterDeviceNotification
TrackPopupMenu
DrawEdge
DdeAbandonTransaction
GetPropA
MonitorFromRect
SetRectEmpty
GetDCEx
LoadImageA
EnumDisplaySettingsA
IsCharAlphaNumericW
ImpersonateDdeClientWindow
CreateDialogParamW
SendDlgItemMessageW
DragObject
GetWindowDC
GetProcessDefaultLayout
DeferWindowPos
GetWindowPlacement
GetIconInfo
SetProcessWindowStation
CreateIconFromResourceEx
DialogBoxParamA
FindWindowExW
MapVirtualKeyExW
SetUserObjectSecurity
LoadBitmapW
IsCharLowerW
SetCursor

gdi32

GetBoundsRect
GdiGetDC
GetCharABCWidthsW
GetTextFaceA
BitBlt
PolyPolyline
CreateScalableFontResourceA
RemoveFontResourceW
RectVisible
SetArcDirection
ExtEscape
CreateFontIndirectExA
GetCharABCWidthsFloatW
AddFontResourceA
DPtoLP
SetPixelV
GetICMProfileA
ExtTextOutW
EndDoc
SetAbortProc
GetBitmapBits
GetCharWidthI
SelectClipPath
GetTextCharsetInfo
SetRectRgn
UpdateICMRegKeyW
GdiStartDocEMF
GetMetaRgn
GetObjectA
SetDCBrushColor
AddFontMemResourceEx
Ellipse
GetClipBox
DeleteMetaFile
SetBitmapBits
ResetDCW
GetCharWidthW
SetBkMode
GetSystemPaletteUse
Polyline
GetMetaFileA
PolyTextOutA
CreateFontA
ArcTo

advapi32

ObjectOpenAuditAlarmA
ConvertStringSidToSidA
RegSetValueA
CryptEnumProvidersW
LsaLookupPrivilegeName
BuildImpersonateTrusteeA
CreateProcessAsUserA
SystemFunction004
GetOldestEventLogRecord
AccessCheckByTypeResultListAndAuditAlarmW
RegCloseKey
LsaQuerySecurityObject
SystemFunction023
SystemFunction007
ElfRegisterEventSourceA
BuildImpersonateExplicitAccessWithNameW
GetServiceDisplayNameA
CancelOverlappedAccess
CryptSetProvParam
RegOverridePredefKey
SetSecurityInfoExA

comctl32

ImageList_BeginDrag
ImageList_GetIconSize
ImageList_Create
_TrackMouseEvent
FlatSB_GetScrollPos
PropertySheetW
ImageList_SetIconSize
ord17
ImageList_LoadImageA
ord4
ImageList_AddMasked
FlatSB_SetScrollProp
InitializeFlatSB
ord13
ImageList_GetImageCount
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetImageInfo
CreateToolbarEx
FlatSB_GetScrollRange
FlatSB_SetScrollInfo
ImageList_Duplicate
PropertySheetA
ImageList_SetFilter
FlatSB_ShowScrollBar
FlatSB_SetScrollRange
ImageList_ReplaceIcon
InitCommonControlsEx
ord14
ImageList_EndDrag
ImageList_Copy
ImageList_SetDragCursorImage
DrawStatusTextW
ImageList_LoadImageW
ImageList_Merge
UninitializeFlatSB
ImageList_SetImageCount
ord6
ImageList_AddIcon
DestroyPropertySheetPage
ord7
ImageList_SetOverlayImage
ImageList_DragLeave
ImageList_SetBkColor
ImageList_Add
ord16
FlatSB_GetScrollInfo
ord8
FlatSB_EnableScrollBar
FlatSB_GetScrollProp
ImageList_Write
ImageList_DragMove
ImageList_DrawIndirect
ord3
ImageList_Read
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_Remove
CreatePropertySheetPageA
ImageList_Replace
CreatePropertySheetPageW
ImageList_GetImageRect
ord2
CreateStatusWindowW
ord5
ImageList_DragEnter
FlatSB_SetScrollPos
ImageList_GetIcon
ImageList_Draw
ord15
ImageList_Destroy

opengl32

glMapGrid2d
glStencilFunc
GlmfEndGlsBlock
glDebugEntry
glAccum
glTexCoord1f
glColor3uiv
wglUseFontOutlinesW
glDrawArrays
glColorPointer
glVertex4d
glTexCoord2i
glDeleteLists
glMap1d
glTexGenf
glLineStipple
glCopyTexSubImage1D
glDepthMask
glMap1f
glEvalCoord2fv
glTexCoord1i
glNewList
glIsList
glGetFloatv
glLightModelf
glVertex2fv
glGetPolygonStipple
glLoadIdentity
glColor4usv
glTexCoord2fv
glRasterPos2sv
glGetTexImage
glPrioritizeTextures
glGetPixelMapfv
glIndexfv
glNormalPointer
glFeedbackBuffer
glLightiv
glPolygonStipple
glLightModeliv
glPixelTransferf
glEdgeFlagv
glTexImage1D
glColor4dv
glGetTexLevelParameterfv
GlmfEndPlayback
glFlush
glRotated
wglCreateContext
wglGetProcAddress
glRasterPos4s
glRasterPos3sv
glColor3ub
glTexParameterfv
glGetTexEnvfv
glRectdv
glVertex3fv
glRasterPos3f
glTexCoordPointer
glVertex4fv
glBlendFunc
glGetTexLevelParameteriv
wglUseFontOutlinesA
glFogiv
glVertex3d
glColor3s
glMap2f
glRasterPos4f
glTexEnvi
glTexSubImage2D
glDrawBuffer
glColor3bv
glLogicOp
glNormal3bv
glMateriali
glArrayElement
glListBase
glTexCoord4d
glPixelMapuiv
glTexGendv
glColorMask
wglGetLayerPaletteEntries
glVertex4dv
wglDescribeLayerPlane
glIndexs
glVertex3iv
glRasterPos2i
glRasterPos4iv
glTexCoord4i
glRasterPos4i
glRectsv
glPixelTransferi
GlmfInitPlayback
glRasterPos3iv
wglGetPixelFormat
glFinish
glGetError
glStencilMask
glDrawPixels
glColor4iv
glRasterPos2d
glTexCoord4f
glGetMapiv
wglCreateLayerContext
glGetTexGendv
glPushName
glGetMaterialfv
glTexCoord1iv

version

VerQueryValueW
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoW
VerFindFileW
GetFileVersionInfoSizeA
VerFindFileA
VerInstallFileA
VerInstallFileW
GetFileVersionInfoA

winmm

waveOutWrite
waveOutGetNumDevs
mixerGetControlDetailsA
waveOutGetPosition
joyGetPosEx
CloseDriver
midiStreamOut
mixerGetLineControlsA
midiOutLongMsg
midiOutSetVolume
mciSetDriverData
joyGetNumDevs
timeSetEvent
mmioStringToFOURCCW
DefDriverProc
mmioAdvance
joySetThreshold
midiOutMessage
waveOutSetPlaybackRate
mmioStringToFOURCCA
mciExecute
waveInGetID
midiOutGetErrorTextA
GetDriverModuleHandle
joySetCapture
waveInReset
PlaySoundA
timeGetDevCaps
waveOutSetPitch
waveOutPrepareHeader
midiOutGetErrorTextW
PlaySoundW
WOW32DriverCallback
mod32Message
waveOutGetVolume
joyGetPos
midiInGetDevCapsW
mmioOpenW
DriverCallback
waveInGetNumDevs
WOWAppExit
midiInGetID
timeEndPeriod
mmsystemGetVersion
joyGetDevCapsW
mciGetErrorStringA
timeKillEvent
waveInGetErrorTextA
mciGetYieldProc
midiOutGetID
mixerOpen
mmioCreateChunk
waveOutClose
waveOutOpen
midiDisconnect
midiStreamOpen

winspool.drv

AddMonitorA
AddPrinterDriverExW
GetSpoolFileHandle
StartDocPrinterA
SetFormA
DeletePrintProvidorA
AddPortExA
GetPrinterDriverDirectoryW

msvcrt

isxdigit
sprintf
wcscpy
_hypot
feof
mktime
_searchenv
labs
ungetc
_tzname
raise
_initterm
_wexecvpe
_CIsinh
_execve
_fullpath
abort
__fpecode
fread
vprintf
vswprintf
fwprintf
_wgetdcwd
_eof
fseek
__p___argv
_mbsicoll
fclose
mblen
_execlp
fputc
_set_sbh_threshold
__p__wcmdln
_ismbcspace
_stat
scanf
isgraph
__unDName
strtod
_onexit
iscntrl
_unlink
_strerror
strlen
fsetpos
atof
_wcsicoll
__p__wenviron
__crtCompareStringA
gmtime
fopen
_endthreadex
_CIsin
_safe_fdiv
ferror
fputs
__dllonexit
_atodbl
_i64toa
__initenv
fwrite
wcsstr
_flsbuf
_read
realloc
_makepath
_heapchk
__iscsym
_wspawnvp
_popen
fprintf
memset
_mbsnextc
_sleep
toupper
_ismbcalpha
_utime
mbtowc
_jn
_pctype
ftell
wcspbrk
_seterrormode
asin
signal
log
_clearfp
ungetwc
printf
_chdrive
tmpfile
_copysign

Exports

Exports

Oouvzesjbi
Oqqh
Qklvnvq
Rvvngh
Vysfzl

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca365c44aee3ff5056d7aea00f8e8f1a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

opengl32

version

winmm

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 52KB - Virtual size: 50KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 52KB - Virtual size: 50KB

.reloc
Size: 8KB - Virtual size: 7KB