a6e53b7e78572ca9f9ef6721c0974049_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a6e53b7e78572ca9f9ef6721c0974049_JaffaCakes118
Size

3.1MB
MD5

a6e53b7e78572ca9f9ef6721c0974049
SHA1

9402708fc46558b9ad492e6b140ed0894eaa7b14
SHA256

acf5110b692f29bec153df62cbefc7c6c2533559ee6ab0e33f600920b63084dc
SHA512

48cd741b7f3605daa09b223e3326305dea4be919c9b990f1b08b82b10586bad10d01681a32fbbd42977e142ed7cd2a75b00d940df92b8d6f711d7e5eba52d994
SSDEEP

98304:SZdOMTDgPBMyiJK4ij05SSJSFS3OiLaOcw0y:SZdXn+vik4iuSsSsFfUy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/p2pSearcher.exe

Files

a6e53b7e78572ca9f9ef6721c0974049_JaffaCakes118
.rar
p2pSearcher.exe
.exe windows:5 windows x86 arch:x86

170f34733f3945a9c54af93f5ba6abee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
TerminateThread
WideCharToMultiByte
LocalFileTimeToFileTime
GetCurrentDirectoryW
ReadFile
CreateFileW
GetFileAttributesW
WriteFile
SetFilePointer
GetTempPathW
CreateDirectoryW
CreateThread
CloseHandle
GetCurrentProcess
GetModuleFileNameW
DeleteFileW
MultiByteToWideChar
SizeofResource
Sleep
WaitForSingleObject
SystemTimeToFileTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
GetProcessHeap
SetEndOfFile
LoadLibraryA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
LoadResource
GetLastError
FindResourceW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
GetVersionExW
GetProcAddress
GetModuleHandleW
GetTickCount
FreeLibrary
GetACP
ExitProcess
LockResource
GetFileType
DuplicateHandle
DosDateTimeToFileTime
GetFileSize
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
MulDiv
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
HeapFree
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
HeapReAlloc
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
GetStdHandle
GetModuleFileNameA
GetOEMCP
IsValidCodePage
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetModuleHandleA

user32

InvalidateRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
EndPaint
BeginPaint
RedrawWindow
PtInRect
ReleaseDC
DestroyWindow
SetFocus
GetFocus
CreateWindowExW
MapWindowPoints
SendMessageW
UpdateLayeredWindow
GetWindowRect
IsRectEmpty
GetUpdateRect
IsIconic
GetWindow
ScreenToClient
GetCursorPos
GetParent
DispatchMessageW
TranslateMessage
GetMessageW
RegisterClassExW
LoadCursorW
DefWindowProcW
MoveWindow
ShowWindow
IsZoomed
GetWindowRgn
IsWindowVisible
GetPropW
SetPropW
GetWindowLongW
EnableWindow
GetMonitorInfoW
MonitorFromWindow
GetDesktopWindow
LoadImageW
GetSystemMetrics
CallWindowProcW
ClientToScreen
RegisterClassW
GetClassInfoExW
CharNextW
OffsetRect
InflateRect
PostMessageW
wvsprintfW
SetWindowRgn
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
SetCursor
CreateCaret
IntersectRect
SetRect
FillRect
DrawTextW
CharPrevW
HideCaret
SetCaretPos
GetSysColor
GetCaretPos
InvalidateRgn
CreateAcceleratorTableW
GetAsyncKeyState
PostQuitMessage
IsWindow
SetWindowPos
SetWindowLongW
GetClientRect
GetDC
GetKeyState
MessageBoxW
wsprintfW
UpdateWindow
ShowCaret

advapi32

RegOpenKeyW
RegCreateKeyW
RegCloseKey
RegSetValueExW
RegOpenKeyExW

shell32

ShellExecuteW
ord165
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW
SHCreateDirectoryExW

ole32

CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
OleLockRunning

iphlpapi

GetAdaptersInfo

ws2_32

WSACleanup
inet_ntoa
gethostbyname
gethostname
WSAStartup

gdiplus

GdipDeleteBrush
GdipFree
GdipAlloc
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdiplusShutdown
GdipDrawString
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCloneBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteGraphics
GdipDeleteFont
GdiplusStartup
GdipCreateLineBrushI
GdipSetTextRenderingHint
GdipSetStringFormatAlign

shlwapi

PathFileExistsW

msimg32

AlphaBlend

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

wininet

InternetConnectA
InternetConnectW
InternetOpenW
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestW
HttpSendRequestW
InternetReadFile

comctl32

_TrackMouseEvent
ord17

gdi32

RestoreDC
SaveDC
CreateCompatibleBitmap
CreateDIBSection
CreateCompatibleDC
SetDIBColorTable
GetSystemPaletteEntries
PtInRegion
CreateRectRgn
CreateRoundRectRgn
ExtTextOutW
SetBkColor
DeleteDC
Rectangle
SetBkMode
SetTextColor
CreatePatternBrush
CombineRgn
ExtCreateRegion
SelectClipRgn
ExtSelectClipRgn
GetObjectA
GetDeviceCaps
GetCharABCWidthsW
GetTextExtentPoint32W
TextOutW
CreateSolidBrush
SetWindowOrgEx
DeleteObject
SelectObject
GetTextMetricsW
BitBlt
GetStockObject
GetObjectW
CreateFontIndirectW
CreatePen
GdiFlush
RoundRect
CreatePenIndirect
MoveToEx
LineTo
SetStretchBltMode
StretchBlt
GetClipBox
CreateRectRgnIndirect

oleaut32

SysAllocString
SysFreeString

Sections

.text
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

170f34733f3945a9c54af93f5ba6abee

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

iphlpapi

ws2_32

gdiplus

shlwapi

msimg32

imm32

wininet

comctl32

gdi32

oleaut32

Sections

.text Size: 405KB - Virtual size: 404KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 10KB - Virtual size: 20KB

.rsrc Size: 3.0MB - Virtual size: 3.0MB

.reloc Size: 41KB - Virtual size: 40KB

.text
Size: 405KB - Virtual size: 404KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 10KB - Virtual size: 20KB

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

.reloc
Size: 41KB - Virtual size: 40KB