f7a8815d9a9ee8d29e947f5de1d01eb0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f7a8815d9a9ee8d29e947f5de1d01eb0_JaffaCakes118
Size

3.6MB
MD5

f7a8815d9a9ee8d29e947f5de1d01eb0
SHA1

bc85b267c7ae8b5e35310fa47414d111c3f7689a
SHA256

71c3a85862ff4a7bb7594f4bff9da0d7c68dbf58ea6cc3a930a93561eba2836c
SHA512

6eeacb486ee947c1fd36ea883ae3ae76ac825f253efb2de4fca65492d9d4d2e73205045817d4f42c44f99499886d15bf879e723f32cdd07d3d23a572c64febaf
SSDEEP

49152:pvRfRIbovh0D/owWu1k9su78jLRJS0GWOyi+TAvkLsdvdyo6FzA3AtZH:pvDvh0DLVal8jLRI1yiaAvoip6F03k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7a8815d9a9ee8d29e947f5de1d01eb0_JaffaCakes118

Files

f7a8815d9a9ee8d29e947f5de1d01eb0_JaffaCakes118
.dll windows:6 windows x86 arch:x86

5846aab1e84227dc900f361cfdb06b72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dbghelp

SymGetSymPrev64
SymCleanup
GetTimestampForLoadedLibrary
SymGetSearchPath
SymInitialize

ws2_32

WSAAsyncGetServByPort
WSAAsyncGetHostByName
WSAAsyncGetHostByAddr
WSACancelAsyncRequest

wininet

HttpSendRequestExW
HttpAddRequestHeadersW
FtpSetCurrentDirectoryW
InternetOpenW
InternetConfirmZoneCrossing
InternetGetConnectedStateEx

comctl32

ImageList_Destroy
ImageList_Create
ImageList_GetImageInfo
ImageList_ReplaceIcon
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_Replace

shlwapi

PathIsRootW
ord487
PathIsUNCA
PathIsURLA
AssocCreate
ColorRGBToHLS
SHDeleteValueW
PathIsSameRootW

version

GetFileVersionInfoA
VerFindFileA

winmm

auxGetNumDevs
midiInPrepareHeader
midiOutCacheDrumPatches
auxOutMessage

rpcrt4

MesBufferHandleReset
MesIncrementalHandleReset
MesInqProcEncodingId
MesDecodeIncrementalHandleCreate
MesEncodeDynBufferHandleCreate
MesEncodeIncrementalHandleCreate
MesHandleFree
MesEncodeFixedBufferHandleCreate
MesDecodeBufferHandleCreate

urlmon

ReleaseBindInfo
CopyBindInfo
URLOpenBlockingStreamW

msimg32

TransparentBlt
AlphaBlend
GradientFill

kernel32

GetStringTypeW
GetFullPathNameW
GetCurrentDirectoryW
SetFilePointerEx
ReadFile
HeapReAlloc
DeleteFileW
GetConsoleMode
GetConsoleCP
HeapFree
GetACP
HeapAlloc
LCMapStringW
CompareStringW
MultiByteToWideChar
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
SetStdHandle
GetModuleHandleExW
SetConsoleCtrlHandler
FindFirstFileExA
SetConsoleDisplayMode
VirtualFree
GetStdHandle
WriteFile
VirtualAlloc
FindNextFileA
SetFilePointer
SetEndOfFile
FindClose
CreateFileW
UnmapViewOfFile
lstrcatA
Sleep
GetLastError
GetConsoleDisplayMode
lstrcatW
DeleteFileA
GlobalAlloc
lstrcpyA
CloseHandle
LoadLibraryW
FlushConsoleInputBuffer
GetProcAddress
CreateFileMappingA
LocalFree
FreeLibrary
WideCharToMultiByte
lstrcpyW
GetFileType
CreateDirectoryA
FormatMessageA
MapViewOfFile
FlushFileBuffers
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
DecodePointer
GetEnvironmentStringsW
ReadConsoleW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
WriteConsoleW
GetTimeZoneInformation
HeapSize
FindFirstFileA
SetLastError
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent

user32

wsprintfW
wsprintfA
WindowFromPoint
ReleaseDC
GetDC

gdi32

DeleteObject
CreatePenIndirect
GetPixel
GetWindowOrgEx
CreateBitmapIndirect
GetBkColor
SetWindowOrgEx
CreateFontIndirectExA
GetAspectRatioFilterEx

comdlg32

PrintDlgA
GetFileTitleW
FindTextA
CommDlgExtendedError
PrintDlgW

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

shell32

SHGetFolderPathAndSubDirW
ord47
ord192
ord245
ord134
ord18
ord155
ord4
SHGetFolderPathA
ord2

Exports

Exports

Mat4OrthographicProjection
ServiceMain
hashtable2_verify
hashtable_itor_last
hb_itor_search_ge
pr_tree_free
rotate_lr
skiplist_itor_invalidate
skiplist_link_count_histogram
sp_itor_valid
tr_tree_search

Sections

.text
Size: 712KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.7MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5846aab1e84227dc900f361cfdb06b72

Headers

DLL Characteristics

File Characteristics

Imports

dbghelp

ws2_32

wininet

comctl32

shlwapi

version

winmm

rpcrt4

urlmon

msimg32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

Exports

Exports

Sections

.text Size: 712KB - Virtual size: 712KB

.rdata Size: 117KB - Virtual size: 117KB

.data Size: 2.7MB - Virtual size: 2.9MB

.reloc Size: 28KB - Virtual size: 28KB

.text
Size: 712KB - Virtual size: 712KB

.rdata
Size: 117KB - Virtual size: 117KB

.data
Size: 2.7MB - Virtual size: 2.9MB

.reloc
Size: 28KB - Virtual size: 28KB