2bad2af353982d3a3b2d9c518da33b3a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2bad2af353982d3a3b2d9c518da33b3a_JaffaCakes118
Size

2.1MB
MD5

2bad2af353982d3a3b2d9c518da33b3a
SHA1

281c2c48e3a94cb2278f996d342937127ff4d868
SHA256

58321ace3a552ec3eec2eb62b01f7661fd998c4e97a678715bd5b9ba629012ab
SHA512

40fdaf5e4b447808a62abc0c0d94ff4eb41d31ee17e1ddd646e3e7cb4fbc98b525c502613cd5f1813858cfb177c822ed832a42db4a1a0fee94013991a5b4e204
SSDEEP

49152:KB/Skk14s83l4tfqIjZSVjyx7Vhe81ue1tkfOts7IFYbHQTMRz+nVIvHoCm:qJk14s8atffZSVuxJhe81ueLtEIFYb03

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bad2af353982d3a3b2d9c518da33b3a_JaffaCakes118

Files

2bad2af353982d3a3b2d9c518da33b3a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ab505c74e1a303896b3c6381125cbcf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\GSP5.5\SRC\Apps\RTF\Setup\sln\Release\Inspur_GSP_Setup.pdb

Imports

kernel32

WriteConsoleW
IsValidCodePage
SetEnvironmentVariableA
GetDriveTypeW
LCMapStringW
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
GetTimeZoneInformation
IsDebuggerPresent
UnhandledExceptionFilter
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
HeapQueryInformation
ExitProcess
GetFileType
SetStdHandle
HeapReAlloc
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
CreateThread
ExitThread
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
GetNumberFormatW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetCurrentDirectoryW
SetErrorMode
GetSystemDirectoryW
GetFileTime
GetFileSizeEx
GetFileAttributesW
GetFileAttributesExW
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
InitializeCriticalSection
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
SuspendThread
SetThreadPriority
lstrcpyW
GetTickCount
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GetLocaleInfoW
LoadLibraryExW
FindNextFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileW
CreateFileW
lstrcmpiW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
GetModuleHandleW
lstrcmpW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
FileTimeToLocalFileTime
FileTimeToSystemTime
WideCharToMultiByte
CopyFileW
GlobalSize
lstrlenW
FreeLibrary
GetModuleFileNameW
SetLastError
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
InterlockedDecrement
InterlockedIncrement
CompareStringW
Sleep
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
ResetEvent
SetEvent
FreeResource
GlobalAlloc
ResumeThread
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
CreateEventW
TerminateProcess
OpenProcess
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetCurrentDirectoryA
lstrlenA
lstrcmpA
LocalAlloc
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentProcess
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessW
FormatMessageW
GetLastError
LocalFree

user32

SetCapture
SetWindowRgn
GetSystemMenu
DeleteMenu
OffsetRect
IntersectRect
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
DestroyIcon
UnregisterClassW
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
RegisterClipboardFormatW
SetTimer
KillTimer
WaitMessage
PostQuitMessage
GetCursorPos
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
DrawStateW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CharUpperW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
EnableScrollBar
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
WindowFromPoint
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
PtInRect
GetWindow
LoadMenuW
GetDesktopWindow
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
UpdateLayeredWindow
MonitorFromPoint
IsMenu
IsWindowEnabled
GetMenuStringW
MessageBoxW
EnableWindow
SetRect
CreatePopupMenu
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
UnhookWindowsHookEx
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendMessageA
DrawIcon
MessageBoxA
LoadIconW
GetParent
SetMenuDefaultItem
GetWindowRgn
MapDialogRect
DestroyCursor
SubtractRect
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetMenuDefaultItem
GetWindowRect
GetClientRect
GetSystemMetrics
SendMessageW
IsIconic
CopyRect
GetSysColor
FillRect
InvalidateRect
ReleaseDC
GetDC
ReleaseCapture
MessageBeep
NotifyWinEvent
GetAsyncKeyState
IsZoomed
IsRectEmpty
SetMenu
UnionRect
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
CharUpperBuffW
CopyIcon
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
FrameRect
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetNextDlgGroupItem
LoadImageW
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongW
DestroyAcceleratorTable
SetParent
PostThreadMessageW
GetMessagePos

gdi32

MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateFontIndirectW
GetTextExtentPoint32W
CreateDIBitmap
CreateRectRgnIndirect
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
LineTo
CombineRgn
PatBlt
DPtoLP
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetPixel
Rectangle
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceW
SetPixelV
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDCW
CopyMetaFileW
CreateBitmap
GetStockObject
GetDIBColorTable
StretchBlt
CreateDIBSection
GetObjectW
SetDIBColorTable
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
CreateSolidBrush
DeleteDC
SelectObject
SetRectRgn
DeleteObject
GetDeviceCaps

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegDeleteValueW
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegSetValueW
RegQueryValueExW
RegCreateKeyExW
RegEnumValueW
RegEnumKeyExW
RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegDeleteKeyW

shell32

ExtractIconW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoW
ShellExecuteExW
SHAppBarMessage
DragFinish
DragQueryFileW
ShellExecuteW

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
PathRemoveFileSpecW

ole32

OleCreateMenuDescriptor
OleGetClipboard
CoTaskMemFree
StringFromCLSID
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
StringFromGUID2
CoDisconnectObject
CoCreateInstance
CoInitialize
CoUninitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
DoDragDrop
CoInitializeEx
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
CoRevokeClassObject
CoRegisterClassObject
CreateStreamOnHGlobal
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop

oleaut32

SysFreeString
SysAllocString
SysStringByteLen
SysStringLen
VariantInit
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
VariantChangeType
VarBstrFromDate
VariantCopy
VariantClear
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
OleLoadPicture

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateBitmapFromHBITMAP

ws2_32

WSAStartup
WSACleanup
WSASetLastError

wininet

InternetQueryDataAvailable
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetSetOptionExW
HttpOpenRequestW
InternetOpenUrlW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
HttpAddRequestHeadersW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 468KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab505c74e1a303896b3c6381125cbcf8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

ws2_32

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 280KB - Virtual size: 279KB

.data Size: 24KB - Virtual size: 54KB

.rsrc Size: 468KB - Virtual size: 468KB

.reloc Size: 168KB - Virtual size: 168KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 280KB - Virtual size: 279KB

.data
Size: 24KB - Virtual size: 54KB

.rsrc
Size: 468KB - Virtual size: 468KB

.reloc
Size: 168KB - Virtual size: 168KB