3692633395142b264b0a73e4994f657f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3692633395142b264b0a73e4994f657f_JaffaCakes118
Size

300KB
MD5

3692633395142b264b0a73e4994f657f
SHA1

8fe00da5f0b2114a132f41eb5e7065d46e7741fa
SHA256

1e1de0f37611f653df13fc687b6bc2df4a8d243b3172f0a0700ea9537954848e
SHA512

32d168254c027ab40a02309716040e0565247536be9e83c65f63ba4753bb3f044ca9755feddec8b3d36a96f0ee56223d7fbb5f0ae3faded25e54644b08f537ed
SSDEEP

6144:IDjMVe1dszXGQhDB1kZVfwQ+C3YKmz+3NpxgEw9CnRylV8Cy:+viGQVBsfwQRIKNxgEw8olav

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3692633395142b264b0a73e4994f657f_JaffaCakes118

Files

3692633395142b264b0a73e4994f657f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3c899d02b0376f22076c04299ff5c1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Programming\Visual Studio Projects\Xcp351\Pifsys\Release\DRMServer.pdb

Imports

kernel32

SetLastError
LoadLibraryA
FreeLibrary
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetProcessHeap
HeapAlloc
HeapFree
GetSystemDirectoryA
FindFirstFileA
FindClose
VirtualQuery
GlobalUnlock
SetUnhandledExceptionFilter
GetModuleFileNameA
CreateNamedPipeA
DisconnectNamedPipe
ConnectNamedPipe
InterlockedExchange
CreatePipe
GetCurrentProcess
DuplicateHandle
TerminateThread
GlobalAlloc
GlobalLock
LocalFree
lstrcpynA
FormatMessageA
MulDiv
RaiseException
GlobalFree
lstrcpyA
EnumResourceLanguagesA
ConvertDefaultLocale
GlobalDeleteAtom
GetCurrentThread
GlobalAddAtomA
FreeResource
InterlockedDecrement
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
FileTimeToSystemTime
GlobalFlags
WritePrivateProfileStringA
lstrcatA
GlobalFindAtomA
GlobalGetAtomNameA
LockFile
UnlockFile
SetEndOfFile
GetFileSize
GetFullPathNameA
GetOEMCP
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GetTickCount
ExitProcess
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
HeapSize
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetStringTypeA
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
InterlockedIncrement
InitializeCriticalSection
OutputDebugStringA
FlushFileBuffers
SetFilePointer
ReadFile
EnterCriticalSection
CreateDirectoryA
CreateFileA
WriteFile
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
CreateThread
GetCurrentThreadId
GetCurrentProcessId
UnmapViewOfFile
CreateFileMappingA
GetLastError
MapViewOfFile
SetEvent
Sleep
WaitForSingleObject
GetDriveTypeA
SetErrorMode
GetVolumeInformationA
GetPrivateProfileStringA
GetWindowsDirectoryA
OpenProcess
GetModuleHandleA
CreateToolhelp32Snapshot
CloseHandle
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
lstrcmpA

gdi32

SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
OffsetViewportOrgEx
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
CreateRectRgnIndirect
GetObjectA
GetStockObject
GetRgnBox
GetTextColor
GetBkColor
GetMapMode

user32

ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
GetSysColor
PostQuitMessage
PostMessageA
SetCursor
IsWindowEnabled
GetLastActivePopup
GetParent
MessageBoxA
ValidateRect
GetCursorPos
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
CallNextHookEx
SetWindowsHookExA
LoadBitmapA
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
ModifyMenuA
GetFocus
SetMenuItemBitmaps
SetWindowPos
MapDialogRect
SetWindowContextHelpId
GetWindow
GetSysColorBrush
GetSystemMetrics
LoadCursorA
UnhookWindowsHookEx
GetWindowTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
SetFocus
GrayStringA
GetClassNameA
GetDesktopWindow
PtInRect
GetWindowRect
CopyRect
IntersectRect
wsprintfA
GetWindowPlacement
IsIconic
SystemParametersInfoA
OffsetRect
RegisterClassA
GetClassInfoA
EqualRect
AdjustWindowRectEx
GetMenu
GetClientRect
UpdateWindow
SetForegroundWindow
MapWindowPoints
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
SetActiveWindow
GetForegroundWindow
IsChild
IsWindow
GetClassInfoExA
GetClassLongA
CreateWindowExA
GetCapture
WinHelpA
RegisterWindowMessageA
CharNextA
IsRectEmpty
SetRect
CopyAcceleratorTableA
InvalidateRect
InvalidateRgn
SetCapture
ReleaseCapture
GetNextDlgGroupItem
GetNextDlgTabItem
MessageBeep
DestroyMenu
CreateDialogIndirectParamA
RegisterClipboardFormatA
DrawTextExA
DrawTextA
TabbedTextOutA
UnregisterClassA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
EnumWindows
GetMessageA
PeekMessageA
DefWindowProcA
PostThreadMessageA
SendMessageA
LoadIconA
SendDlgItemMessageA
GetDlgItem
EndDialog
GetDlgCtrlID
SetUserObjectSecurity
GetUserObjectSecurity
CloseDesktop
CloseWindowStation
OpenDesktopA
SetProcessWindowStation
GetProcessWindowStation
OpenWindowStationA
CharUpperA

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
OleInitialize
CreateILockBytesOnHGlobal
CoTaskMemFree
CoCreateGuid
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleUninitialize
CoFreeUnusedLibraries

shell32

ShellExecuteA

comctl32

ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oleaut32

SysAllocString
SystemTimeToVariantTime
OleCreateFontIndirect
VariantInit
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantCopy
SafeArrayDestroy

oledlg

ord8

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3c899d02b0376f22076c04299ff5c1a

Headers

File Characteristics

PDB Paths

Imports

kernel32

gdi32

user32

ole32

shell32

comctl32

version

shlwapi

oleaut32

oledlg

comdlg32

winspool.drv

Sections

.text Size: 184KB - Virtual size: 180KB

.rdata Size: 52KB - Virtual size: 48KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 48KB - Virtual size: 45KB

.text
Size: 184KB - Virtual size: 180KB

.rdata
Size: 52KB - Virtual size: 48KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 48KB - Virtual size: 45KB