21290c9f071ab863c1cc924dd0ac714f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

21290c9f071ab863c1cc924dd0ac714f_JaffaCakes118
Size

460KB
MD5

21290c9f071ab863c1cc924dd0ac714f
SHA1

cefbffb766cd4f2d7448e39bb48c09b9057d437d
SHA256

a81a8ef3239ee0151071b59f333476011efe362a26797b174a81b0a0412f0af9
SHA512

b8620e3df2eba1712e4f9c23106c72d1dc93ab8f2431abecd092102a1896607ab6cdb58fd6fed4c21fc55ff7a6f1b76bc82c96471edb531be7578cb82f91ef64
SSDEEP

12288:UnhTUBAUWJJhkBZ1oRr3xwSimBdRpYiWrN9J:UnIE2Z1oNlRWiK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21290c9f071ab863c1cc924dd0ac714f_JaffaCakes118

Files

21290c9f071ab863c1cc924dd0ac714f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65ed099cda8beb808e9b1d0729385d52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

murocapi

GetSzSetting
ReenterAndReapplyProfile
ExcludeThisAPEx
ApplyProfile
GetBoolSetting
GetDwordSetting
IsXpZeroConfigEnabled
AddExcludeListEntry
EnableXpZeroConfig
SetIbssMode
GetAdapterList

psregapi

?OpenOnly@CRegistryEx@@QAEHPAUHKEY__@@PBDK@Z
??1CRegistryEx@@UAE@XZ
??0CRegApi@@QAE@XZ
?QueryValue@CRegApi@@QAEJPBDAAJ@Z
?SetValue@CRegApi@@QAEJPBDPBEK@Z
?GetDWord@CRegistryEx@@QAEJPBDJ@Z
?Close@CRegistryEx@@UAEXXZ
?OpenKey@CRegApi@@QAEJPAUHKEY__@@PBDK@Z
?QueryValue@CRegApi@@QAEJPBDPADAAK@Z
?CloseKey@CRegApi@@QAEJXZ
?QueryValue@CRegApi@@QAEJPBDAAKPAE1@Z
??1CRegApi@@UAE@XZ
?CreateKey@CRegApi@@QAEJPAUHKEY__@@PBDKKAAK@Z
?SetValue@CRegApi@@QAEJPBDK0@Z
?SetValue@CRegApi@@QAEJPBDJ@Z
??0CRegistryEx@@QAE@XZ

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA
ExtractIconA
SHGetFolderPathA

secur32

GetUserNameExA

libeay32

ord268
ord479
ord269
ord267
ord477
ord3106
ord3024
ord3171
ord2206
ord469
ord464
ord962
ord333

pfmgrapi

?Delete@CProfileMgr@@QAEJPBDHK@Z
??1CProfileMgr@@QAE@XZ
?Save@CProfileMgr@@QAEJAAUINTEL_WLAN_PROFILE@@H@Z
?ProfileExists@CProfileMgr@@QAEJPBDK@Z
?Import@CProfileMgr@@QAEJPBD0AAUINTEL_WLAN_PROFILE@@HH@Z
?Close@CProfileMgr@@QAEJXZ
?IsPasswordRequiredForImport@CProfileMgr@@QAEHPBD@Z
?Open@CProfileMgr@@QAEJK@Z
??0CProfileMgr@@QAE@XZ
?SetDefaults@CProfileMgr@@QAEXAAUINTEL_WLAN_PROFILE@@@Z

kernel32

FindResourceA
SetLastError
LoadResource
LockResource
MulDiv
GlobalLock
lstrcpynA
lstrcmpA
GlobalUnlock
GetModuleFileNameA
GlobalAlloc
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
CreateEventA
GlobalFree
InitializeCriticalSection
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
DeleteCriticalSection
lstrcmpiA
GetVersion
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
GetCurrentDirectoryA
GetThreadLocale
SizeofResource
TlsAlloc
DuplicateHandle
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GlobalGetAtomNameA
GetProfileStringA
GetShortPathNameA
lstrlenW
GlobalDeleteAtom
GlobalAddAtomA
GetTickCount
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
GlobalSize
RtlUnwind
ExitProcess
TerminateProcess
RaiseException
HeapAlloc
HeapFree
CreateThread
ExitThread
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
FatalAppExitA
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GlobalFindAtomA
LocalFree
GetModuleHandleA
FormatMessageA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
InterlockedIncrement
GetProcAddress
CreateFileMappingA
Sleep
GetFileSize
WriteFile
MapViewOfFile
UnmapViewOfFile
GetVolumeInformationA
GetVersionExA
CopyFileA
WritePrivateProfileStringA
CreateFileA
ReadFile
CreateProcessA
GetSystemDirectoryA
GetStartupInfoA
lstrlenA
GetCommandLineA
lstrcatA
LoadLibraryA
WinExec
lstrcpyA
GetLastError
FreeLibrary
GetFileAttributesA
DeleteFileA
FindNextFileA
RemoveDirectoryA
CreateDirectoryA
FindFirstFileA
FindClose
CloseHandle
GetCurrentThread
GetCurrentProcess
FileTimeToSystemTime
GetWindowsDirectoryA
FileTimeToLocalFileTime
GetFullPathNameA
GetStringTypeExA
GlobalHandle
TlsFree
SetErrorMode

user32

SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
GetDialogBaseUnits
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
CharUpperA
RegisterClipboardFormatA
RemoveMenu
PostThreadMessageA
DestroyIcon
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextA
GetWindowTextLengthA
GetNextDlgGroupItem
GetDlgCtrlID
GetKeyState
CopyAcceleratorTableA
CharNextA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
OemToCharA
GetMenuStringA
MoveWindow
GetClassNameA
GetWindowLongA
EnumChildWindows
CallWindowProcA
GetDlgItem
DefWindowProcA
MessageBoxA
UpdateWindow
GrayStringA
DrawTextA
TabbedTextOutA
CopyRect
DrawStateA
SetRect
FillRect
DestroyWindow
CallNextHookEx
SetProcessDefaultLayout
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
LoadCursorA
CopyIcon
GetWindowRect
GetParent
GetDC
ReleaseDC
InflateRect
GetSysColor
SetCursor
GetMessagePos
ScreenToClient
GetClientRect
PtInRect
InvalidateRect
SetTimer
MessageBeep
SetWindowLongA
IsWindow
SendMessageA
KillTimer
EnableWindow
InsertMenuA
GetWindowThreadProcessId
WaitMessage
ReleaseCapture
SetCapture
GetSysColorBrush
GetDesktopWindow
wvsprintfA
DestroyMenu
EndDialog
CreateDialogIndirectParamA
LoadStringA
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
SetWindowsHookExA
PostMessageA
GetActiveWindow
ValidateRect
ShowOwnedPopups
PostQuitMessage
GetCursorPos
WindowFromPoint
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
DeleteMenu
GetFocus
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
wsprintfA
CharToOemA
UnhookWindowsHookEx
GetWindow
SetForegroundWindow
WinHelpA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

GetMapMode
DPtoLP
GetBkColor
RoundRect
BitBlt
CreatePen
CreateSolidBrush
GetTextExtentPoint32A
GetStockObject
GetObjectA
CreateFontIndirectA
SaveDC
LPtoDP
CreateCompatibleDC
CreateCompatibleBitmap
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetBkColor
SetBkMode
GetDCOrgEx
GetClipBox
SetTextColor
CreateBitmap
SelectObject
GetTextExtentPointA
CreateDIBitmap
CreateDCA
CopyMetaFileA
GetTextMetricsA
GetTextColor
CreateRectRgnIndirect
CombineRgn
SetRectRgn
SetROP2
SetStretchBltMode
SetPolyFillMode
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
OffsetWindowOrgEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
OffsetClipRgn
SetTextJustification
SetTextCharacterExtra
SetTextAlign
GetCurrentPositionEx
ArcTo
SetMapperFlags
PolyDraw
PolylineTo
SetArcDirection
PolyBezierTo
DeleteObject
SetColorAdjustment
CreateRectRgn
SelectClipPath
GetClipRgn
PlayMetaFileRecord
GetObjectType
ExtSelectClipRgn
PlayMetaFile
GetDeviceCaps
EnumMetaFile
GetWindowExtEx
ExtCreatePen
GetViewportExtEx
CreatePatternBrush
CreateDIBPatternBrushPt
CreateHatchBrush
RestoreDC
PatBlt
StartDocA
DeleteDC
SelectPalette

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyA
RegEnumKeyA
OpenProcessToken
OpenThreadToken
GetUserNameA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
FreeSid
LookupAccountSidA
AllocateAndInitializeSid
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegSetValueA
RegDeleteKeyA

comctl32

_TrackMouseEvent
ord17

ole32

WriteFmtUserTypeStg
CreateBindCtx
WriteClassStg
CoFreeUnusedLibraries
OleRegGetUserType
SetConvertStg
OleDuplicateData
CoDisconnectObject
CoRegisterMessageFilter
CoRegisterClassObject
OleUninitialize
ReadFmtUserTypeStg
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleInitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CoTaskMemFree
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CoCreateInstance
OleRun
CoTaskMemAlloc

oleaut32

SysReAllocStringLen
VariantCopy
VariantChangeType
VariantTimeToSystemTime
VariantClear
OleCreateFontIndirect
SysAllocStringLen
SysFreeString
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SysAllocStringByteLen
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen
LoadTypeLi

oledlg

ord8

shlwapi

PathAppendA
PathRemoveBackslashA
PathFileExistsA

Sections

.text
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.prdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

65ed099cda8beb808e9b1d0729385d52

Headers

File Characteristics

Imports

murocapi

psregapi

shell32

secur32

libeay32

pfmgrapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

ole32

oleaut32

oledlg

shlwapi

Sections

.text Size: 292KB - Virtual size: 290KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 20KB - Virtual size: 36KB

.rsrc Size: 16KB - Virtual size: 14KB

.prdata Size: 56KB - Virtual size: 56KB

.text
Size: 292KB - Virtual size: 290KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 20KB - Virtual size: 36KB

.rsrc
Size: 16KB - Virtual size: 14KB

.prdata
Size: 56KB - Virtual size: 56KB