44de79673e1fb75c8b68bd38a3961eea_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44de79673e1fb75c8b68bd38a3961eea_JaffaCakes118
Size

4.5MB
MD5

44de79673e1fb75c8b68bd38a3961eea
SHA1

f96104683574def3e17b7346eb149d105ef3acb8
SHA256

39204eb9693504e58b92f22d7b1f72b6d1d08119625cece520ae70ac922f342b
SHA512

924ddb5061cd5c8df4a42bd004d016e53ad8afc42d7c48c6be6cf44c346829f21b466da9b31ebf61d5a3d4d3d22d46275437f7b6ce9c38e0302b3eb6ac8989b4
SSDEEP

98304:zq7Mx4LGxfmjwNA5Cw9s+nxGFJU13ss8RsnSzti+hoAqPinoaWBxazxTb:zprNR0Sz8pO9b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44de79673e1fb75c8b68bd38a3961eea_JaffaCakes118

Files

44de79673e1fb75c8b68bd38a3961eea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5b1c100e2324d217263a085d437cb76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Data-P4\Curry3_LB\InfoTool\Release\InfoTool.pdb

Imports

shfolder

SHGetFolderPathA

setupapi

SetupDiGetDeviceInstanceIdA
CM_Disconnect_Machine
SetupDiDestroyClassImageList
CM_Get_DevNode_Registry_PropertyA
CM_Get_DevNode_Registry_Property_ExA
CM_Get_Child_Ex
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
CM_Connect_MachineA
SetupDiGetClassImageList
CM_Locate_DevNode_ExA
CM_Get_Sibling_Ex
SetupDiGetClassImageIndex
SetupDiGetClassDescriptionA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

winmm

waveOutGetDevCapsA
waveOutGetNumDevs

msvfw32

ICOpen
ICGetInfo
ICClose
ICInfo

msacm32

acmDriverDetailsA
acmDriverEnum

rpcrt4

UuidHash
UuidFromStringA
UuidCompare
UuidCreate

psapi

EnumProcesses
GetModuleFileNameExA
GetModuleBaseNameA
EnumDeviceDrivers
EnumProcessModules

kernel32

GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcmpA
GetModuleFileNameW
FileTimeToSystemTime
FileTimeToLocalFileTime
SuspendThread
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
EnumResourceLanguagesA
ConvertDefaultLocale
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
VirtualProtect
GetThreadLocale
SystemTimeToFileTime
MoveFileA
SetFilePointer
FlushFileBuffers
lstrcmpW
UnlockFile
SetEndOfFile
GetFileSize
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
LocalFileTimeToFileTime
SetFileTime
GetFileTime
CreateSemaphoreA
ReleaseSemaphore
ReleaseMutex
WaitForMultipleObjects
GlobalFlags
GetCPInfo
GetOEMCP
GetAtomNameA
SetErrorMode
GetCurrentDirectoryA
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
HeapReAlloc
VirtualAlloc
VirtualQuery
GetSystemTimeAsFileTime
GetProcessHeap
GetStartupInfoA
ExitThread
CreateThread
WriteConsoleW
GetFileType
GetStdHandle
SetStdHandle
ExitProcess
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
GetConsoleCP
GetConsoleMode
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetCurrentDirectoryA
GetTimeZoneInformation
SetConsoleCtrlHandler
LoadLibraryW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
GetLocaleInfoW
SetEnvironmentVariableA
CopyFileA
GlobalSize
RaiseException
DisconnectNamedPipe
WaitNamedPipeA
CreateNamedPipeA
TerminateProcess
OpenProcess
GlobalMemoryStatus
LocalAlloc
InterlockedDecrement
InterlockedIncrement
ResetEvent
QueryDosDeviceA
GetLogicalDrives
GetDriveTypeA
QueryPerformanceFrequency
GetSystemInfo
GetUserDefaultUILanguage
IsBadReadPtr
FindResourceExA
GetTickCount
GetSystemDefaultLangID
GetSystemDefaultLCID
GetLocaleInfoA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetEvent
WaitForSingleObject
CreateEventA
GetFileAttributesA
GetUserDefaultLangID
GlobalAlloc
GlobalFree
GetLongPathNameA
SetThreadLocale
FindFirstFileA
SetFileAttributesA
FindNextFileA
FindClose
RemoveDirectoryA
CreateDirectoryA
lstrcatA
WinExec
MulDiv
lstrcpyA
LoadLibraryExA
FreeLibrary
SetThreadPriority
ResumeThread
GlobalLock
GlobalUnlock
lstrcpynA
GetCommandLineA
CreateMutexA
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
lstrlenA
lstrcmpiW
lstrcmpiA
CompareStringW
lstrlenW
QueryPerformanceCounter
GetCurrentThread
GetVersion
InterlockedExchange
CompareStringA
GetModuleFileNameA
CreatePipe
GetCurrentProcess
DuplicateHandle
ReadFile
FreeConsole
GetWindowsDirectoryA
DeleteFileA
GetExitCodeThread
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetVersionExA
GetSystemDirectoryA
FormatMessageA
LocalFree
GetLastError
DeviceIoControl
GetTempPathA
FreeResource
GetCurrentProcessId
GetComputerNameA
CreateFileA
WriteFile
CloseHandle
Sleep
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
InterlockedCompareExchange
LockFile

user32

GetDialogBaseUnits
DestroyMenu
GetMenuItemInfoA
GetAsyncKeyState
ShowOwnedPopups
PostQuitMessage
GetNextDlgGroupItem
SetWindowContextHelpId
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetActiveWindow
ValidateRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetWindowThreadProcessId
InvalidateRgn
CopyAcceleratorTableA
ScrollWindowEx
ShowWindow
MoveWindow
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DefWindowProcA
CallWindowProcA
IntersectRect
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
WindowFromPoint
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuStringA
RemoveMenu
MapVirtualKeyA
GetKeyNameTextA
SetForegroundWindow
BringWindowToTop
SetWindowTextA
GetWindowTextA
IsWindowEnabled
IsDialogMessageA
MapDialogRect
WinHelpA
IsChild
MessageBeep
DrawFocusRect
LoadMenuA
ModifyMenuA
EnableWindow
SendMessageA
wsprintfA
wsprintfW
MessageBoxA
GetWindowRect
GetSubMenu
GetMenuItemID
GetMenuItemCount
WaitForInputIdle
GetDesktopWindow
AdjustWindowRect
IsWindowVisible
GetSysColorBrush
DestroyWindow
GetKeyState
SetWindowPos
IsRectEmpty
IsMenu
GetWindowLongA
GetClassNameA
GetMenu
GetWindow
ClipCursor
GetMessageA
ReleaseCapture
SetWindowLongA
SetCapture
GetCapture
RegisterWindowMessageA
GetFocus
DrawEdge
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
InflateRect
CopyRect
PostMessageA
FrameRect
GetCursorPos
ScreenToClient
OffsetRect
SetRectEmpty
SetRect
PtInRect
DestroyCursor
LoadStringA
SystemParametersInfoA
CopyIcon
FillRect
CreateIconIndirect
ReleaseDC
GetIconInfo
TranslateMessage
CharNextA
MsgWaitForMultipleObjects
RegisterClipboardFormatA
UnregisterClassA
DeleteMenu
PostThreadMessageA
LoadBitmapA
GetClientRect
DestroyIcon
GetDC
GetSysColor
IsWindow
CharLowerA
CharLowerW
CharUpperA
CharUpperW
LoadAcceleratorsA
TranslateAcceleratorA
DrawIcon
AppendMenuA
GetSystemMenu
IsIconic
InvalidateRect
LoadCursorA
LoadIconA
GetSystemMetrics
LoadImageA
GetDlgCtrlID
RegisterDeviceNotificationA
UpdateWindow
RedrawWindow
SetTimer
KillTimer
SetCursor
GetParent
EnableScrollBar
ShowScrollBar
DispatchMessageA
InsertMenuA

gdi32

PolyBezierTo
ArcTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
CreateRectRgn
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
EnumFontFamiliesExA
Escape
ExtTextOutA
RectVisible
PtVisible
GetCurrentObject
GetBkColor
Rectangle
SetMapMode
StartDocA
SetTextAlign
EndPage
StartPage
EndDoc
CreateFontA
SelectClipRgn
FrameRgn
CreateRoundRectRgn
TextOutA
SetTextJustification
GetDeviceCaps
GetTextMetricsA
SetBkMode
PolylineTo
SetBkColor
SetTextColor
CreateCompatibleBitmap
CreatePen
MoveToEx
LineTo
CreateBitmap
StretchBlt
GetObjectA
CreateFontIndirectA
GetStockObject
CreateSolidBrush
GetTextExtentPoint32A
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
CreateDIBSection
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
GetTextColor
DeleteDC
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
GetClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
GetRgnBox
GetClipBox
GetDCOrgEx
CreateDCA
CopyMetaFileA
PatBlt
CreateRectRgnIndirect
GetTextExtentPointA
SetDIBitsToDevice
GetTextFaceA
SelectPalette
CreateDIBitmap
CreatePalette
RealizePalette
PolyDraw

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegSetValueA
GetServiceDisplayNameA
QueryServiceConfigA
OpenServiceA
EnumServicesStatusA
OpenSCManagerA
CloseServiceHandle
RegEnumValueA
RegOpenCurrentUser
CryptAcquireContextA
CryptEncrypt
CryptImportKey
CryptReleaseContext
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
CheckTokenMembership
IsValidSid
GetLengthSid
CopySid
OpenThreadToken
OpenProcessToken
DuplicateToken

shell32

ShellExecuteA
ShellExecuteExA
SHCreateDirectoryExA
ExtractIconA
SHGetFileInfoA

comctl32

ImageList_AddMasked
ImageList_Create
ImageList_GetIcon
ImageList_GetImageCount
ord17
_TrackMouseEvent

shlwapi

PathStripToRootA
PathFindFileNameA
PathRemoveExtensionA
PathFindExtensionA
PathIsDirectoryA
PathFileExistsA
PathIsUNCA

oledlg

ord8

ole32

ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoSetProxyBlanket
CoRegisterClassObject
CoTaskMemAlloc
CoInitializeEx
OleSetClipboard
OleUninitialize
ProgIDFromCLSID
CoTaskMemFree
StringFromGUID2
CoInitialize
CoCreateInstance
CoUninitialize
GetRunningObjectTable
CreateItemMoniker
CoFreeUnusedLibraries
OleRun
OleDuplicateData
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
CreateStreamOnHGlobal
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
OleInitialize
CoRevokeClassObject
CoInitializeSecurity
CreateILockBytesOnHGlobal

oleaut32

SysFreeString
SysAllocString
SysAllocStringByteLen
SysStringByteLen
VariantInit
VariantClear
VariantChangeType
SystemTimeToVariantTime
VarBstrFromDate
VariantTimeToSystemTime
SysStringLen
SafeArrayDestroy
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SysAllocStringLen
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
CreateErrorInfo
VarDecFromStr
VarCyFromStr
LoadTypeLi
GetErrorInfo
SetErrorInfo
SafeArrayGetElemsize
VarBstrFromDec

userenv

UnloadUserProfile

wininet

InternetCanonicalizeUrlA

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 400KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 96KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e5b1c100e2324d217263a085d437cb76

Headers

File Characteristics

PDB Paths

Imports

shfolder

setupapi

version

winmm

msvfw32

msacm32

rpcrt4

psapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

userenv

wininet

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 400KB - Virtual size: 397KB

.data Size: 96KB - Virtual size: 116KB

.rsrc Size: 2.4MB - Virtual size: 2.4MB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 400KB - Virtual size: 397KB

.data
Size: 96KB - Virtual size: 116KB

.rsrc
Size: 2.4MB - Virtual size: 2.4MB