2589f2cc3ddf0472ae5786afa6c787f3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2589f2cc3ddf0472ae5786afa6c787f3_JaffaCakes118
Size

332KB
MD5

2589f2cc3ddf0472ae5786afa6c787f3
SHA1

d273e8605adc36c40d0e67e3706f76af357f6b6a
SHA256

124725b02cf40c251726dc632113cb80143bd9e1391d75c6fb9f61c9058fecd1
SHA512

a11055db5fced74ebcf41abf21b6b275fc3d95eda75c9b904c2a1404915c2e8d668f33fcea59cc917b7b39c53971080208447be5ff37470c82a88e2c08c33b9e
SSDEEP

6144:r5e0KxY87oCncBit8ZbmNHVICdaUCgzvuHwpj+iW5N5V:F3gokUbbmpVI1UoKj05V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2589f2cc3ddf0472ae5786afa6c787f3_JaffaCakes118

Files

2589f2cc3ddf0472ae5786afa6c787f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf1589890ca20514a9992ea56c18720f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\perforce\hornet\software\hornet\WinInstaller\WinInstallerSrc\UnInstall\Release\uninstall.pdb

Imports

winspool.drv

EnumPrintProcessorsW
EnumPrintersW
GetPrinterDriverDirectoryW
DeletePrinterDriverExW
EnumPrinterDriversW
DeletePortW
ClosePrinter
DeletePrinter
SetPrinterW
OpenPrinterW
DeleteMonitorW
GetPrintProcessorDirectoryW
DeletePrintProcessorW
DeletePrinterDriverW
DocumentPropertiesW

setupapi

SetupCloseInfFile
SetupOpenInfFileW
CM_Get_DevNode_Status
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupGetStringFieldW
SetupGetFieldCount
SetupFindFirstLineW
SetupFindNextLine
SetupGetLineCountW
SetupGetLineTextW

kernel32

ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetStartupInfoW
RtlUnwind
ExitProcess
TerminateProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
WritePrivateProfileStringW
InterlockedDecrement
GetCurrentThread
GetModuleFileNameW
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryW
SetLastError
MulDiv
lstrcpyW
GlobalAlloc
FormatMessageW
LocalFree
lstrcpynW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
LoadLibraryA
lstrlenW
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
MultiByteToWideChar
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
SetCurrentDirectoryW
GetSystemDefaultLangID
CreateDirectoryW
LoadLibraryExW
lstrcmpiW
GetEnvironmentVariableW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateEventW
CreateThread
SetEvent
GetPrivateProfileStringW
GetVersionExW
lstrcatW
GetWindowsDirectoryW
GetSystemDirectoryW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
GetProcessHeap
HeapAlloc
HeapFree
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
DeleteFileW
MoveFileExW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentDirectoryW
WideCharToMultiByte
GetTickCount
Sleep
CreateFileW
WriteFile
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
FreeLibrary
GetCurrentProcess
GetLastError

user32

RegisterClipboardFormatW
PostThreadMessageW
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetWindowContextHelpId
MapDialogRect
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
ReleaseDC
GetDC
wsprintfW
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
ShowWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
InvalidateRect
SetFocus
IsChild
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
PostMessageW
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
EqualRect
GetClassInfoW
RegisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
LoadIconW
MessageBoxW
UnregisterClassW
KillTimer
SetTimer
SendMessageW
LoadStringW
EnableWindow
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharNextW
CharUpperW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
ReleaseCapture
SetCapture
GetFocus
DestroyMenu
UnhookWindowsHookEx
MoveWindow

gdi32

ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
SetWindowExtEx
RectVisible
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
PtVisible
GetWindowExtEx
GetViewportExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetDeviceCaps
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
TextOutW

comdlg32

GetFileTitleW

advapi32

SetSecurityDescriptorDacl
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
QueryServiceStatus
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
InitiateSystemShutdownW
StartServiceW
OpenServiceW
CloseServiceHandle
OpenSCManagerW
ControlService
RegCloseKey
RegSetKeySecurity
FreeSid
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW

comctl32

ord17

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree

oleaut32

SysAllocStringLen
VariantCopy
SafeArrayDestroy
SysStringLen
VariantInit
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
SysFreeString

Sections

.text
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf1589890ca20514a9992ea56c18720f

Headers

File Characteristics

PDB Paths

Imports

winspool.drv

setupapi

kernel32

user32

gdi32

comdlg32

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 196KB - Virtual size: 194KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 16KB - Virtual size: 64KB

.rsrc Size: 48KB - Virtual size: 47KB

.uuu9 Size: 8KB - Virtual size: 6KB

.text
Size: 196KB - Virtual size: 194KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 16KB - Virtual size: 64KB

.rsrc
Size: 48KB - Virtual size: 47KB

.uuu9
Size: 8KB - Virtual size: 6KB