db8a9c7cdf0e6f7675ed1b98443da68d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

db8a9c7cdf0e6f7675ed1b98443da68d_JaffaCakes118
Size

234KB
MD5

db8a9c7cdf0e6f7675ed1b98443da68d
SHA1

65bc460a44e298d6a780bcb62a8380b9e940bf53
SHA256

d0f3cd6cf0f084a17ccecc0a7c66e68e546b950c57f8bc071ab874b91ddeeb46
SHA512

baee4eb4185fa160d808e8d9363d51517e9cd33c90f2d50db94a3a10a4303e13df4154690d5ef83b4775a2ec2060e95b03b4c12a655e7177aa2052d22b43f543
SSDEEP

6144:mCdjVa4+z929mMFx351v4jQOyQOMi9EI2iso:mC9mMFxJHOyQOMi9EIt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db8a9c7cdf0e6f7675ed1b98443da68d_JaffaCakes118

Files

db8a9c7cdf0e6f7675ed1b98443da68d_JaffaCakes118
.exe windows:6 windows x86 arch:x86

ccd5ba6a5ed5e68e13cf15460a57bc45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\bld\r190_30\drivers\stereo_vision\API\APICommunication\APISvr\Release\bin\nvSCPAPISvr.pdb

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

setupapi

SetupGetStringFieldA
SetupOpenInfFileA
SetupFindFirstLineA

kernel32

GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
MultiByteToWideChar
FormatMessageA
InterlockedIncrement
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
SetFilePointer
SetEndOfFile
GetCurrentProcess
SetErrorMode
TlsGetValue
GetModuleHandleW
GetCPInfo
GetOEMCP
GetFileAttributesA
ExitProcess
RtlUnwind
ExitThread
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
VirtualAlloc
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
CreateProcessA
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
LocalFree
LocalAlloc
GlobalFlags
GlobalFree
GlobalUnlock
InterlockedDecrement
GetModuleFileNameW
lstrlenA
WritePrivateProfileStringA
GetCurrentProcessId
SetLastError
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
WideCharToMultiByte
CompareStringA
FindResourceA
InterlockedExchange
GlobalLock
lstrcmpA
GlobalAlloc
GetModuleHandleA
OutputDebugStringA
OpenSemaphoreA
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
WriteFile
ReadFile
CreateNamedPipeA
ConnectNamedPipe
CreateThread
WaitForSingleObject
ResetEvent
SetEvent
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetWindowsDirectoryA
FindNextFileA
DeleteFileA
MoveFileA
ExpandEnvironmentStringsA
FindFirstFileA
CreateDirectoryA
FindClose
FindResourceExA
LoadResource
SizeofResource
LockResource
FreeResource
GetFileAttributesExA
LeaveCriticalSection
EnterCriticalSection
CreateFileA
Sleep
WaitNamedPipeA
SetNamedPipeHandleState
FlushFileBuffers
DisconnectNamedPipe
GetLastError
CreateEventA
CloseHandle

user32

DestroyMenu
UnregisterClassA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
LoadCursorA
GetCapture
GetMenuItemID
GetSubMenu
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
GetWindowTextA
SetWindowTextA
GetSysColor
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
GetMenuItemCount
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
GetSysColorBrush
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
SendMessageA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
ShowWindow
CallWindowProcA
MessageBoxA
GetMenu

advapi32

RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
ControlService
QueryServiceStatus
DeleteService
CreateServiceA
ChangeServiceConfig2A
StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl

shlwapi

PathFindFileNameA
PathFindExtensionA

oleacc

CreateStdAccessibleObject
LresultFromObject

gdi32

SetViewportExtEx
SetTextColor
GetStockObject
GetDeviceCaps
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
SetMapMode
GetClipBox
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
SetBkColor
RestoreDC
SaveDC
CreateBitmap
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
ScaleViewportExtEx

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccd5ba6a5ed5e68e13cf15460a57bc45

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

setupapi

kernel32

user32

advapi32

shlwapi

oleacc

gdi32

winspool.drv

oleaut32

Sections

.text Size: 145KB - Virtual size: 145KB

.rdata Size: 32KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 42KB - Virtual size: 41KB

.text
Size: 145KB - Virtual size: 145KB

.rdata
Size: 32KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 42KB - Virtual size: 41KB