49017ab0f284602dd9adf821c8fee47d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

49017ab0f284602dd9adf821c8fee47d_JaffaCakes118
Size

276KB
MD5

49017ab0f284602dd9adf821c8fee47d
SHA1

2f8876d6639e7c5c71c45766ff13365c339a4e3e
SHA256

d889a940d9e384fc50966d637d49a7699e4b2555921a7fce2b0404e79fe86169
SHA512

30736c7bb8c2ab7e758bfb44579e6a429c4d3fd02658ce0d72b29e1a9565146250219edd886b6094ae35de60f0ff67bd7e407e0bc864cd9becb7d647684c03cb
SSDEEP

6144:fo+eZ17cLQtNJ3gp+5KSR1BoOqrGkQSk6X:w3DT3i4tGGfQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49017ab0f284602dd9adf821c8fee47d_JaffaCakes118

Files

49017ab0f284602dd9adf821c8fee47d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac5c370ecd3dc63b84281be40dfe785e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Project\DRP\npnAgent\release\npnAgent.pdb

Imports

kernel32

InterlockedIncrement
GetCurrentDirectoryA
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
GetFileAttributesA
GetFileTime
VirtualAlloc
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
ExitProcess
HeapSize
SetStdHandle
GetFileType
TlsFree
VirtualFree
GetStdHandle
GetACP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetDriveTypeA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFullPathNameA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
FindFirstFileA
FileTimeToLocalFileTime
FindNextFileA
FindClose
GetCurrentProcessId
WaitForSingleObject
WritePrivateProfileStringA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
lstrcmpA
FreeLibrary
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetLastError
GetPrivateProfileStringA
DeleteFileA
CloseHandle
GetVersionExA
GetFileInformationByHandle
GetModuleHandleA
GetTimeZoneInformation
GetProcAddress
CreateFileA
GetVolumeInformationA
GetSystemDirectoryA
Sleep
lstrcpyA
FileTimeToSystemTime
GetPrivateProfileIntA
ReleaseMutex
CreateMutexA
InterlockedExchange
lstrcmpiA
lstrlenA
GetVersion
GetLastError
MultiByteToWideChar
CompareStringA
CompareStringW
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
HeapAlloc
HeapDestroy
HeapFree
HeapCreate

user32

UnregisterClassA
LoadCursorA
GetSysColorBrush
ShowWindow
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
SetCursor
GetDesktopWindow
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
UnhookWindowsHookEx
SetMenuItemBitmaps
DestroyMenu
CallNextHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
IsIconic
SetTimer
LoadIconA
DrawIcon
GetClientRect
GetSystemMetrics
EnableWindow
SendMessageA
KillTimer
GetClassInfoA
CharUpperA

gdi32

DeleteDC
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegQueryValueA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oleaut32

VariantClear
VariantChangeType
VariantInit

urlmon

URLDownloadToFileA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ws2_32

gethostbyname
inet_ntoa

wininet

InternetConnectA
HttpSendRequestA
InternetReadFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpQueryInfoA
HttpOpenRequestA
InternetWriteFile
DeleteUrlCacheEntry
InternetQueryDataAvailable

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac5c370ecd3dc63b84281be40dfe785e

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

urlmon

version

ws2_32

wininet

Sections

.text Size: 196KB - Virtual size: 193KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 196KB - Virtual size: 193KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 20KB - Virtual size: 18KB