3cc55b34a340a5e8d0f63db9acd29b26_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3cc55b34a340a5e8d0f63db9acd29b26_JaffaCakes118
Size

1.4MB
MD5

3cc55b34a340a5e8d0f63db9acd29b26
SHA1

82a9a7f014517dbffdf1199fd2770382527c18f1
SHA256

6e7aa5a47851a249ede5af71540ae24cb45ef1a25ca6a925d85e3c79ed9dfa9d
SHA512

630a754691a683163c63d5e1490c8e9394ebe4e94e1bd3cbf0c350317d7ce3887d9bac7ed9c6994097cd096d70932537361e9250641745e342cf67da3faa7ca3
SSDEEP

24576:8BEdxQW4JfR4N+2NUrdb+nEOlm/kEBAGvePVFg:SFiNbUDOs/kEBAGg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc55b34a340a5e8d0f63db9acd29b26_JaffaCakes118

Files

3cc55b34a340a5e8d0f63db9acd29b26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eab937b118b7224f3ac1ee98509bcba6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAAccept
inet_ntoa
accept
socket
WSAStartup
WSACleanup
WSAGetOverlappedResult
WSASend
WSARecv
inet_addr
WSASocketA
closesocket
recv
send
htonl
bind
listen
htons
gethostbyname
connect
WSAGetLastError
WSAAsyncSelect

logproc

?Add@CLogProc@@QAAXPADZZ
?AddTD@CLogProc@@QAAXPADZZ
??1CLogProc@@QAE@XZ
?Print@CLogProc@@QAEXPAUHWND__@@HH@Z
?Create@CLogProc@@QAEXH@Z
??0CLogProc@@QAE@XZ
?MsgBox@@YAXPADZZ

kernel32

TerminateThread
GlobalUnlock
GetQueuedCompletionStatus
CloseHandle
PostQueuedCompletionStatus
FindResourceA
FreeResource
LoadResource
GetLastError
LockResource
GlobalFree
GetLocaleInfoW
SetEnvironmentVariableA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetStdHandle
IsBadCodePtr
Sleep
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
VirtualAlloc
HeapReAlloc
HeapAlloc
FatalAppExitA
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetACP
OutputDebugStringA
GetStdHandle
DebugBreak
RaiseException
ExitThread
TerminateProcess
HeapValidate
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
FindResourceExA
SetErrorMode
FormatMessageA
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
DeleteCriticalSection
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetProfileIntA
VirtualProtect
FileTimeToLocalFileTime
InitializeCriticalSection
GetCurrentDirectoryA
GetSystemInfo
FileTimeToSystemTime
GetProcessVersion
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
LocalFree
TlsAlloc
LocalAlloc
InterlockedDecrement
SizeofResource
WideCharToMultiByte
IsBadWritePtr
InterlockedIncrement
IsBadReadPtr
GlobalFlags
IsBadStringPtrA
IsBadStringPtrW
MultiByteToWideChar
MulDiv
SetLastError
SetFileTime
GetDiskFreeSpaceA
GetFileTime
lstrcpynA
GetFullPathNameA
GetTempFileNameA
FreeLibrary
GetFileAttributesA
LoadLibraryA
GlobalGetAtomNameA
GetVersion
lstrcatA
GetModuleHandleA
GlobalFindAtomA
lstrcpyA
GetPrivateProfileStringA
GetProcAddress
WritePrivateProfileStringA
ResumeThread
GetPrivateProfileIntA
GlobalAddAtomA
lstrlenA
GetThreadPriority
SetThreadPriority
SetEvent
CreateEventA
SuspendThread
GlobalAlloc
WaitForSingleObject
GetModuleFileNameA
lstrcmpiA
GlobalDeleteAtom
lstrcmpA
GlobalLock
GetCurrentThread
GetCurrentThreadId
CreateIoCompletionPort
CreateThread
GetProfileStringA
EnterCriticalSection
LeaveCriticalSection
GetTickCount

user32

GetMenuState
GetMenuItemID
GetMenuDefaultItem
SetMenuDefaultItem
GetMenuStringA
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
SubtractRect
UnionRect
InflateRect
SetRect
PtInRect
IsRectEmpty
SetRectEmpty
GetMenuItemCount
GetSubMenu
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
InsertMenuA
GetMenuItemInfoA
ScrollWindow
EndDeferWindowPos
SetScrollInfo
WinHelpA
GetClassInfoA
TrackPopupMenu
DefWindowProcA
GetClassNameA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
OpenIcon
CloseWindow
LoadIconA
LoadCursorA
PostThreadMessageA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
CopyRect
GetScrollInfo
SetMenuContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
RemoveMenu
ModifyMenuA
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
IsChild
GetTopWindow
GetWindow
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
GetDesktopWindow
SetCapture
GetCapture
KillTimer
SetTimer
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ScreenToClient
ClientToScreen
MapWindowPoints
GetClientRect
GetWindowRect
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
SetMenu
GetMenu
TabbedTextOutA
PostMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
SetCursor
PostQuitMessage
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
EnableWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
CharUpperA
DestroyIcon
DestroyCursor
SetCursorPos
GetAsyncKeyState
GetClipboardFormatNameA
LoadStringA
GetDialogBaseUnits
OemToCharA
CharToOemA
CheckMenuRadioItem
GetMenuContextHelpId
IsWindowEnabled
MessageBoxA
LoadMenuIndirectA
ShowCaret
HideCaret
MapDialogRect
GetWindowContextHelpId
SetWindowContextHelpId
wsprintfA
SendMessageA
SetWindowPlacement
SetFocus
RegisterClassA
CharNextA
DefDlgProcA
UnregisterClassA
IsWindowUnicode

gdi32

BeginPath
GetCurrentObject
GetColorAdjustment
CloseMetaFile
CreateEnhMetaFileA
CreateMetaFileA
ExtTextOutA
GetDCOrgEx
CloseEnhMetaFile
SetTextColor
SetBkColor
GetClipBox
DeleteDC
SaveDC
GetObjectA
SelectObject
GetStockObject
RestoreDC
SetBkMode
SetPolyFillMode
SelectPalette
SetStretchBltMode
SetMapMode
SetROP2
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
SetWindowOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SetWindowExtEx
IntersectClipRect
OffsetClipRgn
ExcludeClipRect
LineTo
SetTextAlign
MoveToEx
SetTextCharacterExtra
SetMapperFlags
SetTextJustification
ArcTo
SetArcDirection
GetCurrentPositionEx
PolylineTo
SetColorAdjustment
PolyDraw
DeleteObject
GetClipRgn
PolyBezierTo
SelectClipPath
ExtSelectClipRgn
CreateRectRgn
GetObjectType
EnumMetaFile
PlayMetaFileRecord
GetDeviceCaps
CreatePen
PlayMetaFile
PolyBezier
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
UnrealizeObject
CreatePenIndirect
CreateBrushIndirect
CreateFontIndirectA
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateDCA
CreateICA
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
GetNearestColor
RealizePalette
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
CreateDIBitmap
GetTextExtentPointA
ExtCreatePen
ExtFloodFill
TextOutA
FloodFill
GetTextAlign
GetTextFaceA
GetTextExtentPoint32A
GetTextCharacterExtra
GetAspectRatioFilterEx
EnumFontFamiliesExA
PlayEnhMetaFile
GdiComment
WidenPath
StrokePath
StrokeAndFillPath
SetMiterLimit
GetPath
GetMiterLimit
FlattenPath
FillPath
EndPath
CloseFigure
CreateBitmap
AbortPath
GetCharWidthFloatA
GetCharABCWidthsFloatA
ExtEscape
DrawEscape
EndPage
SetAbortProc
GetTextMetricsA
PolyPolyline
GetArcDirection
AngleArc
SetPixelV
PlgBlt
MaskBlt
EndDoc
AbortDoc
SetBoundsRect
Escape
StartPage
StartDocA
GetGlyphOutlineA
GetKerningPairsA
GetFontData
GetCharABCWidthsA
GetOutlineTextMetricsA
ResetDCA
GetBoundsRect

comdlg32

ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
RegEnumKeyA
GetFileSecurityA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
ExtractIconA
DragAcceptFiles

comctl32

ImageList_GetBkColor
ImageList_SetOverlayImage
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Remove
ImageList_AddMasked
ImageList_EndDrag
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_DragEnter
ImageList_DragLeave
ImageList_GetIcon
ImageList_SetBkColor
ImageList_Draw
CreatePropertySheetPageA
ImageList_Read
ImageList_Add
PropertySheetA
DestroyPropertySheetPage
ImageList_GetImageCount
ord14
ImageList_Write
ord8
ImageList_Merge
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord13
ord17

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ifc
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eab937b118b7224f3ac1ee98509bcba6

Headers

File Characteristics

Imports

ws2_32

logproc

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 56KB - Virtual size: 2.0MB

.idata Size: 20KB - Virtual size: 19KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 56KB - Virtual size: 55KB

.ifc Size: - Virtual size: 1B

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 56KB - Virtual size: 2.0MB

.idata
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 56KB - Virtual size: 55KB

.ifc
Size: - Virtual size: 1B