039cf08a45f1789420147f79b0307f03_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

039cf08a45f1789420147f79b0307f03_JaffaCakes118
Size

337KB
MD5

039cf08a45f1789420147f79b0307f03
SHA1

fdc4a36125f73cb74b7ee9c126674a9feb120bab
SHA256

acefafd4178af1a7045083f1fc91de846694f65c1e8e443ba84b356a3922c760
SHA512

da366edbc80ba99ca01586405bef1bd4bc459dcacf39160e33794148c71569166eac6002649ab0ff9c34c87b99ecd4c861f87bc82ceec9c78a674c522c79bb62
SSDEEP

6144:BlDS5YOqkEEpwE2Eya9JTAWbQtvc/O07Vyof9INDgq7J:7sYOqEpwE2Eym9bQtvcDVyMIFgM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
039cf08a45f1789420147f79b0307f03_JaffaCakes118

Files

039cf08a45f1789420147f79b0307f03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7945db039fd5dcd742879a040002d8d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mapidrv

?SetModemOpModeReg@@YAEUModemOpMode_Data@@@Z
?GetReHSKCount@@YAEPAK@Z
?DefCounterPoll_M@@YAEPAUT_AMSW_def_counter_set_Multi@@@Z
?EnableModemLine@@YAEXZ
?GetServiceNameReg@@YAEW4MAPI_NDIS_MODE@@PAE1@Z
?DisableModemLine@@YAEXZ
?GetPvcDataEx@@YAEPAUPVC_DataEx@@@Z
?Configuration@@YAEPAK@Z
?PPPoEGetService@@YAEPAUServiceList@@@Z
?PPPoEClear@@YAEXZ
?PPPoEConnect@@YAEPAE@Z
?TestSachemUtopiaLoopback@@YAEPAU_loopback@@@Z
?TestPciDmaLoopback@@YAEPAU_loopback@@@Z
?SetPvcDataEx@@YAEPAUPVC_DataEx@@@Z
?SetDrvOperationMode@@YA?AW4MAPI_DRV_STATUS@@W4MAPI_DRV_OPMODE@@@Z
?ReportModemStates@@YAEPAK@Z
?DoDrvTest@@YAEKPAKPAUT_A2_Loopback_Counter@@1@Z
?GetDllVersion@@YAEPAD@Z
?GetDriverVersion@@YAEPAD@Z
?CloseServices@@YA?AW4MAPI_DRV_STATUS@@XZ
?OpenServices@@YA?AW4MAPI_DRV_STATUS@@XZ
?GetChannelOperData@@YAEPAUT_A2_TWO@@@Z
?SetPvcData@@YAEUPVC_Data@@@Z
?NearEndLineData@@YAEPAUT_AMSW_NT_NearEndLineOperData@@@Z
?GetModemOpModeReg@@YAEPAUModemOpMode_Data@@@Z
?GetAtmStatisticCount@@YA?AW4MAPI_ATM_STATUS@@W4MAPI_ATM_STATISTIC@@PAKW4MAPI_ATM_AFTER_READ@@@Z
?ResetAtmStatisticCount@@YA?AW4MAPI_ATM_STATUS@@W4MAPI_ATM_STATISTIC@@@Z

kernel32

SetErrorMode
GetFileTime
FileTimeToSystemTime
GetTickCount
RtlUnwind
ExitProcess
FileTimeToLocalFileTime
GetStartupInfoA
TerminateProcess
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
GetFileAttributesA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
LCMapStringA
GetModuleHandleA
GetFileSize
LocalReAlloc
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentThread
lstrcpyA
GlobalAddAtomA
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
lstrcpynA
CopyFileA
GetWindowsDirectoryA
DeleteFileA
WritePrivateProfileStringA
GetSystemDirectoryA
GetPrivateProfileStringA
GetCurrentProcess
GetLastError
GetVersionExA
GetModuleFileNameA
GetFullPathNameA
GetThreadLocale
FindClose
GetVolumeInformationA
FindFirstFileA
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
LoadLibraryA
DuplicateHandle
GetProcessVersion
TlsGetValue
GetProcAddress
FreeLibrary
LCMapStringW
TlsSetValue
EnterCriticalSection
GetProfileStringA
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
SetLastError
GlobalFlags
MulDiv
VirtualProtect
CloseHandle
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
VirtualAlloc
GetStringTypeA
GetCommandLineA

user32

SetCapture
ClientToScreen
InvertRect
GetWindowDC
OffsetRect
FillRect
PtInRect
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
MapDialogRect
GetAsyncKeyState
LoadStringA
GetClassNameA
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetSysColorBrush
CharUpperA
IntersectRect
CharNextA
CopyAcceleratorTableA
SetRect
MessageBeep
GetNextDlgGroupItem
RegisterClipboardFormatA
LoadCursorA
InflateRect
ReleaseDC
SetCursor
ShowOwnedPopups
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
IsDialogMessageA
PostMessageA
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
PostThreadMessageA
SetFocus
AdjustWindowRectEx
InvalidateRect
GetClientRect
BeginDeferWindowPos
GetDC
EndDeferWindowPos
IsWindowVisible
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
RegisterClassA
GetMenuItemCount
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
ReuseDDElParam
SetMenu
DestroyMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
GetNextDlgTabItem
EndDialog
GetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
DestroyIcon
LoadMenuA
GetSubMenu
DeleteMenu
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
TrackPopupMenu
BringWindowToTop
IsIconic
EqualRect
UnpackDDElParam
DeferWindowPos
GetFocus
CopyRect
GetMenuItemID
MessageBoxA
GetWindowRect
KillTimer
FindWindowA
UpdateWindow
LoadIconA
SetActiveWindow
SendMessageA
ExitWindowsEx
EnableWindow
SetTimer
GetClassInfoA
SetWindowTextA
DrawFocusRect
WindowFromPoint
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

GetDeviceCaps
DeleteObject
CreateSolidBrush
GetTextExtentPointA
ExtTextOutA
GetStockObject
SetMapMode
DeleteDC
CreateFontIndirectA
SelectObject
GetTextMetricsA
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetBkMode
RestoreDC
SaveDC
CreateCompatibleDC
BitBlt
CreateDIBitmap
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
SetTextAlign
GetWindowExtEx
GetViewportExtEx
PtVisible
RectVisible
Escape
LPtoDP
TextOutA
GetMapMode
DPtoLP
GetTextColor
GetBkColor
OffsetViewportOrgEx
SetTextColor

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegEnumValueA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish
Shell_NotifyIconA

comctl32

PropertySheetA
ImageList_Destroy
CreatePropertySheetPageA
DestroyPropertySheetPage
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoRevokeClassObject
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID

oleaut32

SysStringLen
SysFreeString
SysAllocStringLen
OleCreateFontIndirect
VariantClear
VariantChangeType
SysAllocString
SysAllocStringByteLen

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7945db039fd5dcd742879a040002d8d4

Headers

File Characteristics

Imports

mapidrv

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Sections

.text Size: 202KB - Virtual size: 202KB

.rdata Size: 55KB - Virtual size: 55KB

.data Size: 40KB - Virtual size: 57KB

.rsrc Size: 39KB - Virtual size: 40KB

.text
Size: 202KB - Virtual size: 202KB

.rdata
Size: 55KB - Virtual size: 55KB

.data
Size: 40KB - Virtual size: 57KB

.rsrc
Size: 39KB - Virtual size: 40KB