0d7ebd192c28530d732cb269941ee748_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d7ebd192c28530d732cb269941ee748_JaffaCakes118
Size

425KB
MD5

0d7ebd192c28530d732cb269941ee748
SHA1

9c4b967726a0592ac3f64cbb4905db76d7d8eebc
SHA256

ccb93c4c3e622803c3e1c4b27b620f7fe5b5e7e4e591f66a4003220cf546e8a1
SHA512

633141bbd2ec65dfb8901f62d9a44475d328b2f155d0b16e87f3d68ffca55ff69e5b174147a8efc2757e572f2257acc845761242c956899db9550fdb178a2c1c
SSDEEP

6144:FwJO5V9knyM0KteCrFBD3H5v1POVW7D5jdaQGdOVWMsS6AO1KR2qU:FwJuAmZMBD3HPOVWP5jdVZn6782qU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d7ebd192c28530d732cb269941ee748_JaffaCakes118

Files

0d7ebd192c28530d732cb269941ee748_JaffaCakes118
.dll windows:6 windows x86 arch:x86

cc1ddb7db6d320287636ff6633333ce7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ord412
_TrackMouseEvent
ord410
ord413

kernel32

WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
HeapSize
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
GetStdHandle
HeapFree
GetACP
HeapAlloc
GetModuleFileNameA
GetModuleHandleExW
InterlockedFlushSList
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
GetCPInfo
GetLocaleInfoW
LCMapStringW
DecodePointer
EncodePointer
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
CreateEventW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
MulDiv
CreateEventA
DebugBreak
WideCharToMultiByte
FreeLibrary
GetProcessHeap
ExitProcess
LocalFree
GetProcAddress
CloseHandle
LoadLibraryA
GetSystemDirectoryA
SetEvent
CreateFileA
LoadLibraryExW
OutputDebugStringW
GetLastError
FormatMessageW
Sleep
MultiByteToWideChar
GetCurrentThreadId
SetLastError
ReadFile
GetStartupInfoW
CreateFileW

user32

GetWindowTextW
EnableWindow
EndPaint
BeginPaint
GetWindowLongW
SetScrollInfo
GetMessageW
GetMenuItemInfoW
DefWindowProcW
AdjustWindowRectEx
GetKeyState
PostMessageW
GetWindowRect
DestroyWindow
GetDC
SetWindowPos
GetPropW
MonitorFromWindow
PostMessageA
CreateWindowExW
SendMessageW
CallNextHookEx
EndDialog
GetSystemMetrics
UnregisterClassW
SetWindowTextW
CreatePopupMenu
GetScrollInfo
DialogBoxParamA
GetActiveWindow
ShowWindow
DispatchMessageW
IsDialogMessageA
GetMonitorInfoW
SetMenuItemInfoW
PeekMessageW
IsChild
RegisterClassW
MapWindowPoints
ValidateRect
GetDoubleClickTime
GetSysColor
UnhookWindowsHookEx
GetMessageTime
DefWindowProcA
SetFocus
SetPropW
GetUpdateRect
TranslateMessage
SendMessageA
GetClassNameW
SetParent
SetCapture
SetWindowsHookExW
CreateDialogParamA
SetWindowLongW
GetClientRect
GetDlgItem
AppendMenuW
PostQuitMessage
SystemParametersInfoW
CreateMenu
PtInRect
UpdateWindow
ReleaseCapture
InvalidateRect
GetAncestor
ReleaseDC

gdi32

SetBrushOrgEx
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetDeviceCaps
GetTextMetricsW
CreatePatternBrush
DeleteDC
GetTextExtentPoint32W
SetBkMode
DeleteObject

advapi32

RegCloseKey
RegCreateKeyExA
RegisterServiceCtrlHandlerA
StartTraceA
SetServiceStatus
RegQueryValueExA
StopTraceA
QueryTraceA

ole32

CoTaskMemFree
CoCreateInstance
CoUninitialize

Exports

Exports

HollowLumpus
NEG32
ServiceMain
clt_mdct_forward_c
compute_ebands
ec_enc_done
ec_laplace_get_freq1
ec_read_byte_from_end
icwrs

Sections

.text
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc1ddb7db6d320287636ff6633333ce7

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

ole32

Exports

Exports

Sections

.text Size: 307KB - Virtual size: 307KB

.rdata Size: 95KB - Virtual size: 95KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 307KB - Virtual size: 307KB

.rdata
Size: 95KB - Virtual size: 95KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 17KB - Virtual size: 16KB