06085f4107dbb06b23f9408fd035a841_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

06085f4107dbb06b23f9408fd035a841_JaffaCakes118
Size

1.0MB
MD5

06085f4107dbb06b23f9408fd035a841
SHA1

226a05fdd01b64399027d7a95e3910593fe51895
SHA256

26195a5ee942ad952f4b28fb8b4b16054db55ed4f5fd559a1e98128b606c9ea9
SHA512

a64f882d20182d684fd091891e0476d53f0aea9b003ae6be62e246fbc4ea34550b3778f85f894b0497d6a28daa22847038e22c5b4c8f2b92e591ba9d165fad3a
SSDEEP

24576:DpLryfCg4XFDFxNfAyNu8vHRVrPxDTNKkkw4:D1Zg4XFbDTw3w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06085f4107dbb06b23f9408fd035a841_JaffaCakes118

Files

06085f4107dbb06b23f9408fd035a841_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dd36ebdf1e286ba23b65d399e61f1a1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\users\anthonya\desktop\workspace\kxdriver_v5.3.1025a5\modules\profile\releasev\KMPF53IQ.pdb

Imports

shlwapi

StrStrIA

kernel32

GetOEMCP
GetCPInfo
FatalAppExitA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
VirtualAlloc
GetStdHandle
SetHandleCount
GetCurrentThread
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
VirtualProtect
GetSystemInfo
VirtualQuery
SetEndOfFile
GetProcessHeap
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
SetEnvironmentVariableA
SizeofResource
LoadResource
LockResource
GlobalSize
ExpandEnvironmentStringsA
GetFileSize
DeleteFileA
DeleteFileW
WriteFile
Sleep
SetFilePointer
ReadFile
GetLocaleInfoA
lstrlenA
lstrcmpiA
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree
LoadLibraryA
LoadLibraryW
OutputDebugStringA
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
UnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
HeapFree
HeapAlloc
RtlUnwind
RaiseException
GetCommandLineA
GetModuleHandleA
GetLastError
SetLastError
CreateFileA
CreateFileW
CloseHandle
MulDiv
GetModuleFileNameA
GetModuleFileNameW
GetSystemDirectoryA
FindFirstFileA
MoveFileA
FindNextFileA
FindClose
MultiByteToWideChar
lstrcpyA
GetVersionExA
FindResourceA
GetACP
WideCharToMultiByte
CompareStringW
GetFileType

user32

DialogBoxParamW
DialogBoxParamA
EndPaint
BeginPaint
SetWindowLongA
GetWindowLongA
WinHelpA
GetSysColor
SetFocus
GetDlgItemTextA
SendDlgItemMessageW
SendDlgItemMessageA
SetWindowTextW
SetWindowTextA
GetIconInfo
LoadImageA
GetDlgCtrlID
CreateWindowExW
CheckDlgButton
ReleaseCapture
ClientToScreen
SetCapture
GetParent
keybd_event
CallWindowProcA
LoadBitmapA
LoadIconA
EnableWindow
ShowWindow
ReleaseDC
CreateDialogParamW
CreateDialogParamA
GetDesktopWindow
GetSystemMetrics
wsprintfW
MessageBoxA
MessageBoxW
SetDlgItemTextA
SetDlgItemTextW
DrawTextA
IsWindowEnabled
PostMessageA
wsprintfA
UnregisterHotKey
RegisterHotKey
IsWindow
DestroyWindow
ScreenToClient
MoveWindow
GetWindowRect
GetWindowTextA
GetDC
InvalidateRect
UpdateWindow
GetDlgItemTextW
EndDialog
SendMessageW
DrawFocusRect
GetDlgItem
SendMessageA

gdi32

CreateRectRgn
CombineRgn
GetStockObject
StretchDIBits
RectVisible
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
GetDIBits
CreateDIBPatternBrushPt
SetBrushOrgEx
PatBlt
CreateDIBSection
EnumFontFamiliesExA
CreateDCA
CreateFontIndirectA
GetTextExtentPoint32W
RestoreDC
SaveDC
DPtoLP
CreateCompatibleBitmap
GetMapMode
SetMapMode
CreateBitmapIndirect
StretchBlt
GetPixel
GetDeviceCaps
CreateFontA
GetTextMetricsA
SetTextAlign
GetDIBColorTable
CreatePalette
SelectPalette
RealizePalette
CreateBitmap
BitBlt
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
GetObjectA
SetTextColor
SetBkColor
CreateSolidBrush
SelectObject
CreatePen
Rectangle
DeleteObject
SetBkMode
ExtTextOutA
ExtTextOutW
CreateFontW

winspool.drv

SetPrinterDataA
GetPrinterDataA
ClosePrinter
GetPrinterA
OpenPrinterW
OpenPrinterA
GetPrinterDriverA
DocumentPropertiesW
GetPrinterW
DeletePrinterDataA
DocumentPropertiesA
SetPrinterA
SetPrinterW
DeviceCapabilitiesW
DeviceCapabilitiesA

comdlg32

GetOpenFileNameW
ChooseColorA

advapi32

StartServiceA
CloseServiceHandle
RegCreateKeyExA
RegCreateKeyExW
RegDeleteValueA
RegOpenKeyExA
RegOpenKeyExW
RegEnumValueA
RegEnumValueW
RegQueryValueExA
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
OpenSCManagerW
ControlService
OpenServiceA
OpenSCManagerA

Exports

Exports

??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXAAV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?GetS@CxIOFile@@UAEPADPADH@Z
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Scanf@CxIOFile@@UAEJPBDPAX@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z
DllMain
EditProfileDialog
GetClass
InstallModule
RestoreDevModeFromProfile
RestoreProfilePrinterReg
RunKXModuleCmd
RunProfile

Sections

.text
Size: 848KB - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd36ebdf1e286ba23b65d399e61f1a1d

Headers

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

Exports

Exports

Sections

.text Size: 848KB - Virtual size: 844KB

.rdata Size: 120KB - Virtual size: 117KB

.data Size: 72KB - Virtual size: 77KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 848KB - Virtual size: 844KB

.rdata
Size: 120KB - Virtual size: 117KB

.data
Size: 72KB - Virtual size: 77KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 24KB - Virtual size: 23KB