f57326d6509e8e234cc4e897ae053a01_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f57326d6509e8e234cc4e897ae053a01_JaffaCakes118
Size

1.3MB
MD5

f57326d6509e8e234cc4e897ae053a01
SHA1

3e3a77f527dae6316735e11d230a344f51a0eae9
SHA256

d0c0353f0214e5d174a6aaa3c5d66a96f286804656a085454c478b5e7b03e261
SHA512

b520c7fa89afb75605a3cb135ba98f24f72ea4be45cc20e15ec540350639f967812216242b9c1e34d997fad228ecd4995df1eb9b64f748ef3b9906b25720781f
SSDEEP

24576:UUOcLYCSd3/9qdpKSKT7R94pTyHtQo8soaC78f76+CyMAO0eQiUMB80eQiUMBOG:/OWYCSF/9q+T4tyyso7mm+xMbyiUMB8b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f57326d6509e8e234cc4e897ae053a01_JaffaCakes118

Files

f57326d6509e8e234cc4e897ae053a01_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1c6a07e1ea9a87f626ecaac4dd4ffca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\cocds\kisengine_git2\product\win32\dbginfo\kinstuiofficial.pdb

Imports

kernel32

GetCurrentDirectoryW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetUserDefaultLangID
GetComputerNameA
GetDiskFreeSpaceExW
GlobalMemoryStatusEx
DeviceIoControl
CreateFileA
LoadLibraryA
GetCurrentProcessId
ExpandEnvironmentStringsW
GetTempPathW
CreateProcessW
SetUnhandledExceptionFilter
CreateEventW
CreateThread
SetEvent
MoveFileW
GetLogicalDriveStringsW
QueryDosDeviceW
lstrcpyW
lstrcatW
GetDriveTypeW
SetCurrentDirectoryW
FlushFileBuffers
GetCurrentDirectoryA
GetFullPathNameA
FindFirstFileA
GetDriveTypeA
GetVolumeInformationW
ExpandEnvironmentStringsA
FormatMessageA
GetSystemDirectoryA
SleepEx
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
FreeResource
GetStringTypeW
GetStringTypeA
IsValidLocale
GetUserDefaultLCID
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
HeapCreate
GetModuleFileNameA
GetStdHandle
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
HeapSize
HeapReAlloc
HeapDestroy
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
VirtualAlloc
VirtualFree
HeapAlloc
GetProcessHeap
HeapFree
GetSystemInfo
InterlockedCompareExchange
GetLocalTime
LoadLibraryExW
InterlockedExchange
FindResourceW
lstrlenA
LoadResource
SizeofResource
GetPrivateProfileStringW
MultiByteToWideChar
GetModuleHandleW
LocalFree
LocalAlloc
OpenProcess
GetSystemDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetTickCount
SetEndOfFile
WriteFile
CreateDirectoryW
GetFileAttributesW
SetFilePointer
Sleep
GetCurrentProcess
SetLastError
TerminateThread
DeleteFileW
GetVersionExW
MoveFileExW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WaitForSingleObject
GlobalUnlock
UnmapViewOfFile
GetCurrentThreadId
GlobalFree
lstrcmpiW
WideCharToMultiByte
lstrlenW
CloseHandle
MapViewOfFileEx
CreateFileMappingW
EnumSystemLocalesA
GetLastError
InterlockedDecrement
GetFileSize
FindResourceExW
InterlockedIncrement
LockResource
RaiseException
FreeLibrary
GetPrivateProfileIntW
GlobalAlloc
ReadFile
GetProcAddress
GlobalLock
GetWindowsDirectoryW
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GetModuleFileNameW
EnterCriticalSection
CreateFileW
DeleteCriticalSection
VirtualQuery

user32

ScreenToClient
DestroyIcon
OffsetRect
KillTimer
SetTimer
GetCursorPos
GetFocus
IsChild
EndPaint
GetSystemMetrics
EnumDisplaySettingsW
EnumDisplayDevicesW
UnregisterClassA
MoveWindow
LoadCursorW
CopyRect
GetDC
MapWindowPoints
ReleaseDC
FindWindowW
GetClientRect
SetFocus
IsWindowEnabled
SetWindowTextW
IsWindow
DefWindowProcW
GetKeyState
WindowFromPoint
SystemParametersInfoW
DrawTextW
GetScrollPos
MonitorFromWindow
GetMonitorInfoW
RegisterWindowMessageW
RegisterClassExW
ShowWindow
UpdateLayeredWindow
SetWindowLongW
EqualRect
PtInRect
DrawIconEx
GetParent
GetWindowRect
SetRectEmpty
InflateRect
SendMessageW
SetCapture
CharNextW
IsWindowVisible
GetDlgItem
LoadImageW
GetWindowLongW
ReleaseCapture
LoadBitmapW
SetWindowPos
SetRect
GetDlgCtrlID
PostThreadMessageW
BeginPaint
CreateWindowExW
LoadIconW
PostMessageW
GetDesktopWindow
DestroyWindow
CallWindowProcW
InvalidateRect
SetForegroundWindow
FindWindowExW
EnumDisplayDevicesA
IsRectEmpty
GetWindowTextW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
IsDialogMessageW
ClientToScreen
GetWindowTextLengthW
GetNextDlgTabItem
SetCursor
SetWindowRgn
GetWindow

gdi32

SetViewportOrgEx
CreateRectRgnIndirect
RoundRect
GetDeviceCaps
GetCurrentObject
GetClipRgn
ExtTextOutW
CreateDIBSection
SetBkColor
CreateCompatibleDC
RestoreDC
DeleteDC
SelectClipRgn
TextOutW
SetBkMode
GetStockObject
GetObjectW
GetViewportOrgEx
Rectangle
BitBlt
CreateRectRgn
GetTextExtentPoint32W
RectInRegion
CreateCompatibleBitmap
CreateBitmap
StretchBlt
GetTextColor
CreateFontIndirectW
SetTextColor
CreatePen
SaveDC
MoveToEx
DeleteObject
LineTo
SelectObject
SetStretchBltMode
ExtSelectClipRgn
CreateRoundRectRgn
OffsetRgn
CombineRgn
CreateFontW

advapi32

DuplicateTokenEx
OpenProcessToken
RegOpenKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation
Shell_NotifyIconW
SHGetFolderPathW
ShellExecuteW

ole32

CoUninitialize
CoSetProxyBlanket
CoInitializeEx
CoInitializeSecurity
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateGuid

oleaut32

VarUI4FromStr
SafeArrayLock
SysStringLen
SysAllocString
VariantClear
VariantInit
SysFreeString
SafeArrayUnlock

shlwapi

PathAppendW
PathRemoveFileSpecW
PathFileExistsW
StrToIntA
PathAddBackslashW
StrToIntW
PathFindFileNameW

comctl32

InitCommonControlsEx
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipSetPenEndCap
GdipGetFamily
GdipAddPathStringI
GdipSetCompositingQuality
GdipSetPixelOffsetMode
GdipLoadImageFromStream
GdipCreateBitmapFromStream
GdipGetFontCollectionFamilyList
GdipGetFontSize
GdipFillPath
GdipDrawImageI
GdipFillRectangle
GdipDrawPath
GdipAddPathArcI
GdipDrawRectangleI
GdipSetPenDashStyle
GdipDrawLine
GdipSetPenStartCap
GdipCloneFontFamily
GdipDeletePath
GdipSetStringFormatAlign
GdipDrawImageRectRect
GdipCreateFont
GdipCreatePath
GdipCreateHBITMAPFromBitmap
GdipFree
GdipMeasureString
GdipDeleteFontFamily
GdipGetImageWidth
GdipCreateFontFromLogfontW
GdipDrawImagePointsRectI
GdipGetImageHeight
GdipSetStringFormatLineAlign
GdipCreateSolidFill
GdipTranslateWorldTransform
GdipSetStringFormatFlags
GdipDeleteGraphics
GdipCloneBrush
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipRotateWorldTransform
GdipSetStringFormatTrimming
GdipCreateFromHDC
GdipAddPathRectangleI
GdipCreateBitmapFromScan0
GdipResetWorldTransform
GdipDeleteBrush
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipDeletePen
GdipGraphicsClear
GdipAddPathPieI
GdipDeleteFont
GdipCreatePen1
GdipCloneImage
GdipDrawImageRectI
GdipNewPrivateFontCollection
GdipLoadImageFromFile
GdipSetClipPath
GdipCloneBitmapArea
GdipDeletePrivateFontCollection
GdipDisposeImage
GdipDrawString
GdipCreateLineBrushI
GdiplusStartup
GdipPrivateAddFontFile
GdipDrawImageRectRectI
GdipGetFontCollectionFamilyCount
GdipCreateImageAttributes
GdipSetTextRenderingHint
GdipDrawLinesI
GdipAlloc
GdipDisposeImageAttributes
GdiplusShutdown
GdipFillRectangleI
GdipImageRotateFlip
GdipCreateStringFormat
GdipClosePathFigure
GdipSetImageAttributesColorMatrix
GdipDeleteStringFormat
GdipSetPenMode

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

iphlpapi

GetAdaptersInfo

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Sections

.text
Size: 636KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 536KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1c6a07e1ea9a87f626ecaac4dd4ffca

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

version

iphlpapi

psapi

Sections

.text Size: 636KB - Virtual size: 634KB

.rdata Size: 132KB - Virtual size: 130KB

.data Size: 20KB - Virtual size: 32KB

.rsrc Size: 536KB - Virtual size: 532KB

.text
Size: 636KB - Virtual size: 634KB

.rdata
Size: 132KB - Virtual size: 130KB

.data
Size: 20KB - Virtual size: 32KB

.rsrc
Size: 536KB - Virtual size: 532KB