417b17ce2b9b829f85881fc841e9d5f7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

417b17ce2b9b829f85881fc841e9d5f7_JaffaCakes118
Size

3.1MB
MD5

417b17ce2b9b829f85881fc841e9d5f7
SHA1

96a4cc000a8b9e10830fb934bca9562f51e34c5e
SHA256

a628d9a20ad6563d047cd91946c80072f70d16f6ba7889ed2965696f2845c7f7
SHA512

44ef1bc90a377e052aafb01b244e4300db538b5a4ae766e68ef65d9328ebcd09351c6807ffcc546110f607941eb13dca765bd95adc0d2d0d3d7d08d1fe357e5d
SSDEEP

98304:Ntm8sAtPF6Y/fcPmXkNHIFcezVtWK4OiZrq1DfPHxD4Vn+cR7R:NN/sgBtF4O7xD4Vn+cv

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
417b17ce2b9b829f85881fc841e9d5f7_JaffaCakes118
unpack001/$PLUGINSDIR/inpaint.exe

Files

417b17ce2b9b829f85881fc841e9d5f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd1742eadfc6df18ded3c26ae64ad610

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
CloseHandle
GetWindowsDirectoryA
GetTempPathA
GetCommandLineA
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
ExitProcess

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/inpaint.exe
.exe windows:5 windows x86 arch:x86

0c753774b9bb708f0c807e9e7b354779

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Documents\My Projects\Inpaint2\Release\Inpaint.pdb

Imports

gdiplus

GdipCreateBitmapFromStreamICM
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdiplusStartup
GdipFree
GdipFillRectangleI
GdipFillRegion
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipGetRegionBoundsI
GdipDeleteRegion
GdipCreateRegionPath
GdipAddPathPolygonI
GdipDeletePath
GdipCreatePath
GdipDrawImagePointRectI
GdipDrawLineI
GdipSetPenDashArray
GdipDeletePen
GdipCreatePen1
GdipDrawImageRectRectI
GdipGraphicsClear
GdipGetImageGraphicsContext
GdipCreateBitmapFromGraphics
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawRectangleI
GdipSaveImageToFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCloneBitmapAreaI
GdipGetImagePixelFormat
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdiplusShutdown
GdipDrawImageI

kernel32

GetFileType
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
RaiseException
HeapReAlloc
ExitProcess
CreateThread
VirtualAlloc
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetStartupInfoW
FindResourceExW
VirtualProtect
SearchPathW
SetErrorMode
Sleep
GetTickCount
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExW
FileTimeToLocalFileTime
GetTempPathW
SystemTimeToFileTime
FileTimeToSystemTime
GetShortPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetThreadLocale
GetSystemInfo
HeapSize
VirtualQuery
ExitThread
GetStringTypeExW
DeleteFileW
MoveFileW
lstrlenA
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GlobalGetAtomNameW
InterlockedDecrement
GetCurrentDirectoryW
CreateFileW
GetFileSize
DeleteCriticalSection
InitializeCriticalSection
GlobalReAlloc
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetProfileIntW
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
GlobalFindAtomW
GetVersionExW
CompareStringW
LoadLibraryA
GetVersionExA
GetCurrentProcessId
CopyFileW
GlobalSize
FormatMessageW
LocalFree
MulDiv
GlobalFree
FreeResource
GlobalAddAtomW
lstrcpyW
GetPrivateProfileStringW
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
CompareStringA
MultiByteToWideChar
WideCharToMultiByte
InterlockedExchange
GlobalAlloc
FreeLibrary
GlobalUnlock
GlobalLock
lstrcmpW
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
GetCurrentThreadId
ResumeThread
SetThreadPriority
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
SetStdHandle

user32

UnionRect
GetNextDlgGroupItem
EnableScrollBar
UpdateLayeredWindow
GetMenuDefaultItem
DestroyCursor
GetKeyNameTextW
SetCursorPos
UnregisterClassW
CopyIcon
GetUpdateRect
FrameRect
SubtractRect
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CharUpperBuffW
IsCharLowerW
MapVirtualKeyExW
MapDialogRect
CreateMenu
GetWindowRgn
GetIconInfo
RegisterClipboardFormatW
EnumChildWindows
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
TranslateAcceleratorW
SetClassLongW
SetParent
LockWindowUpdate
BringWindowToTop
DrawFrameControl
DrawEdge
GetDoubleClickTime
CharUpperW
IsClipboardFormatAvailable
IsMenu
GetSystemMenu
SetMenuDefaultItem
DeleteMenu
CreatePopupMenu
DrawIconEx
EmptyClipboard
CloseClipboard
SetClipboardData
LoadImageW
DestroyIcon
CopyImage
OpenClipboard
DrawStateW
WindowFromPoint
DestroyAcceleratorTable
NotifyWinEvent
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
KillTimer
SetTimer
DrawIcon
IsRectEmpty
ReleaseCapture
SetCapture
GetDCEx
ReleaseDC
GetDC
SetRectEmpty
SetRect
LoadIconW
SendDlgItemMessageA
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
SetScrollInfo
SetWindowPlacement
DefWindowProcW
CallWindowProcW
PtInRect
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
ShowOwnedPopups
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
DestroyMenu
WaitMessage
PostThreadMessageW
LoadMenuW
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetScrollPos
SetScrollPos
MapWindowPoints
DrawFocusRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetNextDlgTabItem
EndDialog
GetWindowTextLengthW
GetWindowTextW
GetFocus
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
GetWindowLongW
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CheckDlgButton
GetWindow
GetSysColorBrush
GetSysColor
ScreenToClient
GetWindowRect
SetWindowRgn
FillRect
CopyRect
InflateRect
RegisterWindowMessageW
IsWindow
GetParent
WinHelpW
SystemParametersInfoW
OffsetRect
IsZoomed
PostQuitMessage
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SendMessageW
GetAsyncKeyState
LoadCursorW
SetCursor
IntersectRect
MessageBeep
ClipCursor
InvalidateRect
ClientToScreen
GetClientRect
RedrawWindow
EnableWindow
PostMessageW
UpdateWindow
GetScrollInfo
GetMenuItemInfoW

gdi32

DeleteDC
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreateSolidBrush
CreateHatchBrush
Escape
SetDIBColorTable
GetDIBits
RealizePalette
CreateCompatibleBitmap
CombineRgn
StretchBlt
SetPixel
CreateDIBSection
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
CreatePolygonRgn
GetBkColor
Polygon
RoundRect
OffsetRgn
GetRgnBox
SetRectRgn
GetViewportOrgEx
CreatePalette
GetPaletteEntries
GetTextFaceW
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
SetPixelV
ExtTextOutW
TextOutW
RectVisible
CreateDIBitmap
PtVisible
Ellipse
LPtoDP
DPtoLP
CreateEllipticRgn
GetTextMetricsW
CreateRectRgnIndirect
UnrealizeObject
CreatePatternBrush
DeleteObject
CreatePen
PatBlt
Rectangle
GetObjectW
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateBitmap
CreateDCW
CopyMetaFileW
GetDeviceCaps
GetTextExtentPoint32W
Polyline
CreateRoundRectRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SelectObject

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

GetFileSecurityW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
RegCreateKeyW
RegEnumKeyExW
RegCloseKey
SetFileSecurityW
RegSetValueW

shell32

SHGetPathFromIDListW
DragQueryFileW
DragFinish
ShellExecuteW
SHAppBarMessage
SHGetFileInfoW
ExtractIconW
SHBrowseForFolderW
DragAcceptFiles

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW

ole32

RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard
DoDragDrop
OleLockRunning
CoInitializeEx
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysAllocString
SysStringLen

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 299KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd1742eadfc6df18ded3c26ae64ad610

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 151KB

.ndata Size: - Virtual size: 36KB

.rsrc Size: 7KB - Virtual size: 6KB

0c753774b9bb708f0c807e9e7b354779

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdiplus

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 299KB - Virtual size: 299KB

.data Size: 24KB - Virtual size: 75KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 145KB - Virtual size: 145KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 151KB

.ndata
Size: - Virtual size: 36KB

.rsrc
Size: 7KB - Virtual size: 6KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 299KB - Virtual size: 299KB

.data
Size: 24KB - Virtual size: 75KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 145KB - Virtual size: 145KB