b63a3773808ac7858415004bfa5ac079_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b63a3773808ac7858415004bfa5ac079_JaffaCakes118
Size

676KB
MD5

b63a3773808ac7858415004bfa5ac079
SHA1

379047338b4135b3b238ff1bdf97e3035ea0726d
SHA256

57aaed9f029ab6bac3f00c1c7033c6e0e637a90167502cb6b77925dc63f66d36
SHA512

6ebf7a89fd981fef3784b00974517d09cb16d1fef4b85cda2f0d51d0ea163552b2dfc2ba4bc2a15d6127840bcd73e98c877343d1f9ae8ca73fd607adca3a404e
SSDEEP

12288:fGqk1WvNAiApuMDePX2mCL+N29RIkZDUf7edI6HPEPNFTHL:pktiIkX2XL+N6+EIf7N7L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b63a3773808ac7858415004bfa5ac079_JaffaCakes118

Files

b63a3773808ac7858415004bfa5ac079_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a0081c51ba912e09db893580ec4e5b33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\ccadmin\桌面\PC_Side_P18D_VIN\src\bin\CMUpdater.pdb

Imports

kernel32

GetFileAttributesW
GetFileSizeEx
GetFileTime
GetStartupInfoW
HeapAlloc
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
RaiseException
HeapReAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
GetTickCount
QueryPerformanceCounter
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetCurrentDirectoryA
GetDriveTypeA
GetProcessHeap
CreateFileA
SetEnvironmentVariableA
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
lstrcmpA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
InterlockedDecrement
GlobalFree
GlobalAlloc
FormatMessageW
LocalFree
GetCurrentProcessId
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
FindClose
FindNextFileW
FindFirstFileW
RemoveDirectoryW
SetFileAttributesW
CopyFileW
ReadFile
ClearCommError
GetOverlappedResult
WriteFile
PurgeComm
SetCommTimeouts
SetCommMask
SetupComm
SetCommState
BuildCommDCBW
GetCommState
CreateFileW
DeleteCriticalSection
InitializeCriticalSection
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateEventW
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
ReleaseMutex
GetCurrentThreadId
CreateDirectoryW
WaitForSingleObject
Sleep
WideCharToMultiByte
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCommandLineW
WritePrivateProfileStringW
FreeLibrary
CreateThread
CreateMutexW
CloseHandle
DeleteFileW
GetModuleFileNameW
lstrcmpiW
lstrlenW
FreeResource
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
GetCPInfo
MultiByteToWideChar
lstrlenA
GetVersionExW
VirtualFree
GetVersion

user32

CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
CharUpperW
RegisterClipboardFormatW
PostThreadMessageW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
CreateDialogIndirectParamW
EndDialog
MoveWindow
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetForegroundWindow
SetActiveWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetMenu
GetScrollRange
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetScrollInfo
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowsHookExW
GetMessageW
GetKeyState
GetCursorPos
ValidateRect
UnhookWindowsHookEx
IntersectRect
DestroyMenu
GetMenuStringW
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
SetWindowLongW
SetRectEmpty
PtInRect
wsprintfW
KillTimer
SetTimer
ChildWindowFromPoint
IsWindow
ShowWindow
DispatchMessageW
TranslateMessage
PeekMessageW
UpdateWindow
MessageBoxW
SetWindowTextW
GetWindowTextW
GetDlgItem
FindWindowW
DrawIcon
IsIconic
LoadIconW
GetTopWindow
ShowScrollBar
SetForegroundWindow
IsWindowVisible
SetWindowPos
DrawStateW
OffsetRect
GetClientRect
DrawFocusRect
InflateRect
FrameRect
PostMessageW
GetWindowRect
SetCapture
IsRectEmpty
UnregisterClassW
LoadCursorW
GetActiveWindow
WindowFromPoint
ClientToScreen
InvalidateRect
ReleaseCapture
DeferWindowPos
SetCursor
GetParent
GetNextDlgTabItem
IsMenu
SendMessageW
GetWindowLongW
DestroyCursor
GrayStringW
DrawTextExW
TabbedTextOutW
EnableWindow
GetSubMenu
LoadBitmapW
GetSysColorBrush
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
ModifyMenuW
GetMenuItemCount
AppendMenuW
ReleaseDC
GetDC
GetDesktopWindow
GetSystemMetrics
DestroyIcon
DrawIconEx
SystemParametersInfoW
DrawTextW
GetMenuItemInfoW
SetRect
DrawEdge
FillRect
GetSysColor
CopyRect
CallNextHookEx

gdi32

ScaleViewportExtEx
ExcludeClipRect
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SetViewportExtEx
SetViewportOrgEx
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetClipBox
SetMapMode
OffsetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
MoveToEx
LineTo
CreateCompatibleDC
SetBkMode
RestoreDC
SaveDC
StretchDIBits
CreateFontW
GetCharWidthW
SetDIBColorTable
GetDIBColorTable
StretchBlt
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
PatBlt
SetPixel
GetPixel
GetObjectW
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
Ellipse
GetTextExtentPoint32W
CreateFontIndirectW
GetBkMode
CreatePen
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
IntersectClipRect

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegQueryValueExW
RegCloseKey
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegNotifyChangeKeyValue

shell32

ExtractIconW
CommandLineToArgvW
SHCreateDirectoryExW
ShellExecuteW
ShellExecuteExW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysStringLen
SysAllocString
SysAllocStringLen
SysFreeString

gdiplus

GdipCreateBitmapFromFileICM
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdipFree
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipBitmapUnlockBits

Sections

.text
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a0081c51ba912e09db893580ec4e5b33

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

Sections

.text Size: 443KB - Virtual size: 442KB

.rdata Size: 122KB - Virtual size: 122KB

.data Size: 12KB - Virtual size: 30KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 61KB - Virtual size: 65KB

.text
Size: 443KB - Virtual size: 442KB

.rdata
Size: 122KB - Virtual size: 122KB

.data
Size: 12KB - Virtual size: 30KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 61KB - Virtual size: 65KB