93c19feed3dc74df766f41ec67c5e9b4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

93c19feed3dc74df766f41ec67c5e9b4_JaffaCakes118
Size

379KB
MD5

93c19feed3dc74df766f41ec67c5e9b4
SHA1

d690d1729a131cc06232cdcd985d97529d2ee2a8
SHA256

fab80c8daa62c97bbb4cac1520a95c25b6cb755fbd181437feb2e51ead19b368
SHA512

b29ab0aef62e95aa9d0baaa9d3d92fcec7dcdd7a009d7011e874d492fdb1b5ae6fd13a2c08c0452153346e65bd78d56b9f41e95be35d4179cd85e6d613a64488
SSDEEP

6144:hrJDIlt49aUmoHbvfYdVJu6xarMCtKfZOvvXKAkmN8z:Ilt46o7Yd39ugfW8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93c19feed3dc74df766f41ec67c5e9b4_JaffaCakes118

Files

93c19feed3dc74df766f41ec67c5e9b4_JaffaCakes118
.exe windows:4 windows x64 arch:x64

930b626da69785df67bcfe3261f7bf77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\Users\chunyung\Documents\Visual Studio 2005\Projects\SonyTestAPO\x64\release x64\vncutil.pdb

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

kernel32

HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapReAlloc
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
ExitProcess
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
FlsGetValue
FlsSetValue
FlsFree
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlVirtualUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
Sleep
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetErrorMode
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetThreadLocale
lstrlenA
GetModuleHandleA
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
GetModuleFileNameW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
FindResourceW
lstrlenW
MulDiv
WideCharToMultiByte
MultiByteToWideChar
GetVersionExW
LocalFree
GetLastError
LocalAlloc
FindResourceExW
LoadResource
LockResource
SizeofResource
GetUserDefaultUILanguage
WaitForMultipleObjects
DeviceIoControl
CreateFileW
CloseHandle
WaitForSingleObject
SetEvent
CreateThread
CreateEventW
FlsAlloc

user32

GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ReleaseDC
GetDC
DestroyMenu
GetWindowThreadProcessId
SetCursor
GetMessageW
TranslateMessage
ValidateRect
PostQuitMessage
ShowWindow
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
EnableMenuItem
CheckMenuItem
GetActiveWindow
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
SendDlgItemMessageA
SendDlgItemMessageW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassNameW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenuEx
GetKeyState
IsWindowVisible
UpdateWindow
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SystemParametersInfoA
GetWindowPlacement
UnregisterClassW
LoadCursorW
GetWindowRect
GetMenuState
GetSysColorBrush
EndPaint
BeginPaint
WinHelpW
ClientToScreen
DestroyIcon
GetSystemMetrics
LoadMenuW
SetWindowPos
RegisterDeviceNotificationW
IsIconic
UnregisterDeviceNotification
SetTimer
RemoveMenu
KillTimer
SetMenuDefaultItem
ModifyMenuW
GetDlgCtrlID
SetWindowTextW
GetMenuItemID
DrawIcon
GetMenuItemCount
LoadIconW
GetSubMenu
GetCursorPos
GetClientRect
SendMessageW
FindWindowExW
GetClassInfoW
SetForegroundWindow
GetParent
GetDesktopWindow
GetWindow
EnableWindow
PostMessageW
GetTopWindow
UnregisterClassA

gdi32

SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
ExtTextOutW
CreateBitmap
GetObjectW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW

shell32

Shell_NotifyIconW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

930b626da69785df67bcfe3261f7bf77

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

setupapi

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 207KB - Virtual size: 207KB

.rdata Size: 65KB - Virtual size: 65KB

.data Size: 12KB - Virtual size: 35KB

.pdata Size: 15KB - Virtual size: 15KB

�� Size: 71KB - Virtual size: 71KB

.text
Size: 207KB - Virtual size: 207KB

.rdata
Size: 65KB - Virtual size: 65KB

.data
Size: 12KB - Virtual size: 35KB

.pdata
Size: 15KB - Virtual size: 15KB

��
Size: 71KB - Virtual size: 71KB