d3cee98ac99635309a546ba5543fa756_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d3cee98ac99635309a546ba5543fa756_JaffaCakes118
Size

981KB
MD5

d3cee98ac99635309a546ba5543fa756
SHA1

e7c1f39178241a660a5110eb3951ea9d188afb00
SHA256

d235beb40ae0e307c5097e781512f8df9afc8da10aabcee3eddbe7446fd03fdd
SHA512

1c7670a32bbc47a573799d5ecfb7126ac9087566ed5dc5fd02592004849170c87f50e4e0b40a595c28d99192dac5eca212379df834016e0030e4f080ea82638c
SSDEEP

12288:ZDC7Gs4AYfY8Vmwu2D7J73SMR/JRUhn2TimRLzweLP5QbRNB3mBfyyumfZBSrWdK:Z+7Gsb2Tim9hL0RNBQRBSrSK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3cee98ac99635309a546ba5543fa756_JaffaCakes118

Files

d3cee98ac99635309a546ba5543fa756_JaffaCakes118
.exe windows:4 windows x86 arch:x86

791254877edfb99604d6d200d1a8b069

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\p4_cougar.nero.com1666_de-c-w-318\source\main\deployment\is\installer\assets\prerequisites\asktoolbar\nerobar\target\checkout\target\classes\x86\release\NeroBar.pdb

Imports

kernel32

GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
RaiseException
RtlUnwind
WriteConsoleW
GetFileType
GetStdHandle
ExitProcess
HeapSize
VirtualAlloc
VirtualQuery
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetStdHandle
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetExitCodeProcess
CreateFileA
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
SetEnvironmentVariableW
FileTimeToLocalFileTime
SetErrorMode
CreateFileW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
FileTimeToSystemTime
GetThreadLocale
VirtualProtect
InterlockedDecrement
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalAddAtomW
GetModuleHandleA
MulDiv
GetCurrentProcessId
SetLastError
GlobalUnlock
WritePrivateProfileStringW
GlobalFree
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
InterlockedCompareExchange
ConvertDefaultLocale
EnumResourceLanguagesW
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
lstrcmpA
GetTickCount
WaitForSingleObject
GetModuleFileNameA
FreeResource
GetLocaleInfoW
lstrcpyW
lstrcmpiW
GetWindowsDirectoryW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetVersion
lstrcatW
WinExec
lstrlenW
LoadLibraryW
GetFileAttributesW
WideCharToMultiByte
FreeLibrary
GetModuleFileNameW
GetLongPathNameW
lstrlenA
MultiByteToWideChar
GetLastError
LocalFree
FormatMessageW
CloseHandle
CreateProcessW
GetModuleHandleW
GetVersionExW
GetSystemInfo
FindClose
FindFirstFileW
LockResource
SizeofResource
LoadResource
FindResourceW
GetSystemDefaultLangID
VirtualFree
GetProcAddress

user32

PostThreadMessageW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DefWindowProcW
CallWindowProcW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
DestroyMenu
GetWindowTextLengthW
SetFocus
ShowWindow
MoveWindow
SendDlgItemMessageW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetMenuStringW
SetWindowsHookExW
CallNextHookEx
TranslateMessage
ValidateRect
GetWindowThreadProcessId
GetLastActivePopup
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuState
CheckMenuItem
SetWindowContextHelpId
SetWindowPos
PostQuitMessage
MessageBoxW
SetWindowTextW
GetDlgCtrlID
GetWindowTextW
IsWindowEnabled
IsDialogMessageW
MapDialogRect
KillTimer
GetCursorPos
SetWindowLongW
SetTimer
CopyIcon
MessageBeep
DestroyCursor
RedrawWindow
GetWindowRect
InflateRect
SetRectEmpty
WinHelpW
IsChild
GetFocus
PostMessageW
ModifyMenuW
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetDesktopWindow
RegisterClipboardFormatW
UnregisterClassW
CharUpperW
GetNextDlgGroupItem
InvalidateRgn
ReleaseCapture
IsWindowVisible
IsRectEmpty
CopyAcceleratorTableW
CharNextW
WindowFromPoint
SendDlgItemMessageA
GetSysColorBrush
IsWindow
DestroyWindow
SetCapture
OffsetRect
SetRect
IsMenu
GetWindowLongW
GetClassNameW
GetMenu
GetWindow
GetNextDlgTabItem
GetKeyState
ReleaseDC
GetDC
GetParent
GetAsyncKeyState
LoadCursorW
SetCursor
GetSysColor
PtInRect
ScreenToClient
RegisterWindowMessageW
DrawFocusRect
CopyRect
GetSystemMenu
SendMessageW
DrawIcon
GetClientRect
LoadIconW
GetSystemMetrics
IsIconic
LoadBitmapW
EnableWindow
PeekMessageW
MsgWaitForMultipleObjects
DispatchMessageW
InvalidateRect
EnableMenuItem
GetMessageW
UnregisterClassA

gdi32

DeleteDC
ExtSelectClipRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetWindowExtEx
CreateRectRgnIndirect
GetObjectW
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SelectObject
GetTextExtentPointW
SetTextJustification
TextOutW
GetStockObject
GetTextExtentPoint32W
CreateFontIndirectW
GetViewportExtEx

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyW
RegOpenKeyW
RegCloseKey
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringLen
SysAllocString
SysFreeString

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 412KB - Virtual size: 410KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

791254877edfb99604d6d200d1a8b069

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

Sections

.text Size: 412KB - Virtual size: 410KB

.rdata Size: 96KB - Virtual size: 94KB

.data Size: 36KB - Virtual size: 53KB

.shared Size: 4KB - Virtual size: 4B

.rsrc Size: 348KB - Virtual size: 346KB

.rrdata Size: 76KB - Virtual size: 76KB

.text
Size: 412KB - Virtual size: 410KB

.rdata
Size: 96KB - Virtual size: 94KB

.data
Size: 36KB - Virtual size: 53KB

.shared
Size: 4KB - Virtual size: 4B

.rsrc
Size: 348KB - Virtual size: 346KB

.rrdata
Size: 76KB - Virtual size: 76KB