0376abdb021584d151c3f00a9ff812c7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0376abdb021584d151c3f00a9ff812c7_JaffaCakes118
Size

128KB
MD5

0376abdb021584d151c3f00a9ff812c7
SHA1

c615d0a8e0aba8befc40c6cb03ec631c84f3b5ac
SHA256

dcad18dbdd78e3ab310d7ba5588cc415d443cae4962c23009a26a5d1c2035f32
SHA512

fd56cd67c6a0e1cacc07aa1fd83dbbb165b3ca917382a3dc77c7924fb12a0c92d7958e6f05a70098a6ac3056c7d2c72995e496aba7c0b480b5a8a9741c05de17
SSDEEP

1536:MtXrdqVnC/YVLWR7CfhLOoVmE8fc+cw47Cnwn1BGySBPKwxlj5eQp:Mtbmn0YxWdCf3Vhw47FnGpBSwxlj5fp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0376abdb021584d151c3f00a9ff812c7_JaffaCakes118

Files

0376abdb021584d151c3f00a9ff812c7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d17e6eeadade82626453af2e30ec8384

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
SetFileAttributesA
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
MulDiv
lstrcmpA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetCPInfo
GetLastError
IsBadCodePtr
IsBadReadPtr
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapSize
TerminateProcess
SetUnhandledExceptionFilter
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
ExitProcess
RtlUnwind
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
GetModuleHandleA
RaiseException
lstrlenW
InterlockedDecrement
InterlockedIncrement
SetErrorMode
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
GetOEMCP

user32

PostQuitMessage
GetWindowLongA
CharNextA
DestroyWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
EnumWindows
GetClassNameA
PostMessageA
UnregisterClassA
GetSystemMetrics
LoadImageA
SetWindowLongA
AdjustWindowRectEx
FindWindowExA
CreateAcceleratorTableA
GetParent
RedrawWindow
IsWindow
GetDlgItem
SetFocus
GetFocus
IsChild
GetWindow
DestroyAcceleratorTable
BeginPaint
EndPaint
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
GetClientRect
FillRect
SetCapture
ReleaseCapture
GetSysColor
CallWindowProcA
CreateWindowExA
RegisterWindowMessageA
RegisterClassExA
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
LoadCursorA
wsprintfA
GetClassInfoExA
SetWindowPos
KillTimer
SetTimer
ShowWindow
UpdateWindow
MoveWindow
SetWindowTextA
SendMessageA

gdi32

GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleDC
DeleteDC
SelectObject
DeleteObject
CreateSolidBrush
CreateCompatibleBitmap

advapi32

RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

ole32

CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
LoadRegTypeLi
VariantInit
OleCreateFontIndirect
SysStringByteLen
VariantClear
SysStringLen
SysAllocString
SysAllocStringLen
VarUI4FromStr
SysFreeString

Exports

Exports

RunIE

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d17e6eeadade82626453af2e30ec8384

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 77KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 80KB - Virtual size: 77KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 12KB - Virtual size: 8KB