04f55546e9dcf271f7fd833eda99ee32_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

04f55546e9dcf271f7fd833eda99ee32_JaffaCakes118
Size

832KB
MD5

04f55546e9dcf271f7fd833eda99ee32
SHA1

64fc70eaed87f124d8a6ed2d5f0f55eb8d7becb7
SHA256

c7efb2a37d3a1e67ac43729c2416c1f6fc6b786cf11e70c8ed94e80fa468f2f9
SHA512

e69e0ca51c9640d17413fb5e6e3b4dd96ce27a0ea2abc6e1e7708601913e2b6e05b5091d5ec1acfe1962a703966720614e4e613d33a905de2ac3ffe4cb2714a9
SSDEEP

24576:MVYgKftrm5C2wu+IJCTQCP+A3ndj6Aa2:MVJymXA3x6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04f55546e9dcf271f7fd833eda99ee32_JaffaCakes118

Files

04f55546e9dcf271f7fd833eda99ee32_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

c4ed8c1a165893b5ccd4d2f1394f9ad8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

I:\VS70Builds\3077\vsbuilt\retail\Bin\i386\opt\msdds.pdb

Imports

kernel32

ExitProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
LocalAlloc
QueryPerformanceCounter
lstrlenA
FileTimeToSystemTime
HeapFree
GetSystemDefaultLCID
GetUserDefaultLCID
GetSystemInfo
LockResource
FreeResource
TlsAlloc
TlsGetValue
InterlockedExchange
TlsSetValue
GlobalHandle
GetProcAddress
GetVersionExA
WideCharToMultiByte
GetTickCount
SetLastError
Sleep
GlobalSize
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
GetProcessHeap
HeapAlloc
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
GlobalAlloc
GlobalLock
GlobalUnlock
LeaveCriticalSection
EnterCriticalSection
GetLastError
IsBadWritePtr
GlobalFree
MulDiv
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetThreadLocale
GetLocaleInfoA
GetACP
OutputDebugStringA

user32

UpdateWindow
InvalidateRect
IsWindow
EqualRect
SetWindowPos
IntersectRect
DestroyWindow
InflateRect
IsRectEmpty
PtInRect
SetRectEmpty
UnionRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
EndPaint
GetClientRect
BeginPaint
SetWindowRgn
OffsetRect
GetWindow
IsChild
GetFocus
ShowWindow
SetFocus
DestroyIcon
DrawIconEx
DestroyCaret
CreateCaret
SetCaretPos
GetIconInfo
SetRect
HideCaret
ShowCaret
GetParent
GetKeyState
DrawFocusRect
IsWindowVisible
RedrawWindow
GetSysColorBrush
DrawEdge
FillRect
GetSysColor
GetUpdateRect
KillTimer
SetTimer
MoveWindow
SetCursorPos
SystemParametersInfoA
GetSystemMetrics
ShowCursor
DragDetect
GetMessagePos
GetAsyncKeyState
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetActiveWindow
SetActiveWindow
GetWindowRect
MapWindowPoints
SetCursor
SetCapture
GetCapture
ReleaseCapture
GetCursor

ole32

CoCreateInstance
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
OleRegEnumVerbs
OleRegGetUserType
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
ReleaseStgMedium
OleGetClipboard
CreateStreamOnHGlobal
DoDragDrop
OleSetClipboard
CLSIDFromString
StringFromCLSID
GetHGlobalFromStream
StgOpenStorage
ProgIDFromCLSID
StringFromGUID2
CoLoadLibrary
CoRegisterMessageFilter
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

VariantChangeTypeEx
OleLoadPicturePath
SysAllocStringByteLen
OleCreatePictureIndirect
OleCreateFontIndirect
GetErrorInfo
SetErrorInfo
VariantCopy
DispGetParam
VariantChangeType
RegisterTypeLi
UnRegisterTypeLi
SysAllocStringLen
SysReAllocString
SysStringByteLen
OleCreatePropertyFrame
SysStringLen
LoadTypeLi
VarUI4FromStr
DispCallFunc
VariantInit
OleTranslateColor
LoadRegTypeLi
VariantClear
SysFreeString
SysAllocString

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

gdi32

GetMetaFileBitsEx
SetWinMetaFileBits
SetEnhMetaFileBits
GetStretchBltMode
SetStretchBltMode
CombineTransform
SetWorldTransform
ModifyWorldTransform
CreatePenIndirect
Ellipse
Chord
Arc
Polygon
GetObjectType
CreateDIBSection
SetDIBitsToDevice
CreateBrushIndirect
CreateCompatibleBitmap
StretchDIBits
CreateBitmap
EnumEnhMetaFile
PlayEnhMetaFile
DeleteEnhMetaFile
StretchBlt
CreateCompatibleDC
BitBlt
CreateEllipticRgn
FrameRgn
CreateSolidBrush
MoveToEx
LineTo
SetBkMode
SetTextColor
PatBlt
IntersectClipRect
Rectangle
StartPage
EndPage
EndDoc
CloseEnhMetaFile
GetStockObject
SelectObject
SetROP2
CreatePen
GetClipBox
Polyline
SetWindowExtEx
DeleteObject
GetPixel
PlayEnhMetaFileRecord
SetBkColor
TextOutW
SetTextAlign
RestoreDC
DeleteDC
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
GetDeviceCaps
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
SetGraphicsMode

comctl32

InitCommonControlsEx
ImageList_Create
ImageList_SetBkColor
ImageList_Add
ImageList_GetIcon
ImageList_Destroy

shlwapi

PathFindExtensionW

msvcr71

__CxxFrameHandler
_wcsnicmp
??0exception@@QAE@ABV0@@Z
_CxxThrowException
realloc
malloc
wcscmp
wcscat
wcscpy
wcslen
_resetstkoflw
memmove
_wcsicmp
wcsncpy
_CIexp
wcsncat
wcsrchr
_wtoi
strncpy
iswdigit
??0exception@@QAE@XZ
_wtol
memset
wcscspn
_ltow
_itow
_fcvt
ceil
strstr
_initterm
_adjust_fdiv
__CppXcptFilter
__security_error_handler
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
??1exception@@UAE@XZ
free
_purecall
_except_handler3
iswascii

msvcp71

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

Exports

Exports

??0CDDSBaseDisp@@QAE@ABU_GUID@@@Z
??0CDDSBaseDisp@@QAE@ABV0@@Z
??1CDDSBaseDisp@@UAE@XZ
??4CDDSBaseDisp@@QAEAAV0@ABV0@@Z
??_7CDDSBaseDisp@@6BCCUSupportErrorInfo@@@
??_7CDDSBaseDisp@@6BIDispatch@@@
??_8CDDSBaseDisp@@7B@
?DdsOverviewWindowProcSTATIC@@YGJPAUHWND__@@IIJ@Z
?FormSubclassWndProcSTATIC@CDDSFormEventSink@@CGJPAUHWND__@@IIJ@Z
?GetIDsOfNames@CDDSBaseDisp@@UAGJABU_GUID@@PAPAGIKPAJ@Z
?GetTypeInfo@CDDSBaseDisp@@UAGJIKPAPAUITypeInfo@@@Z
?GetTypeInfoCount@CDDSBaseDisp@@UAGJPAI@Z
?IMOriginWindowProcSTATIC@@YGJPAUHWND__@@IIJ@Z
?Invoke@CDDSBaseDisp@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?LabelWndProcSTATIC@CLabelEditWindow@@CGJPAUHWND__@@IIJ@Z
?VLoadTypeInfo@CDDSBaseDisp@@QAGXU_GUID@@KPAPAUITypeInfo@@@Z
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer

Sections

.text
Size: 552KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4ed8c1a165893b5ccd4d2f1394f9ad8

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

oleaut32

advapi32

gdi32

comctl32

shlwapi

msvcr71

msvcp71

Exports

Exports

Sections

.text Size: 552KB - Virtual size: 549KB

.data Size: 16KB - Virtual size: 17KB

.rsrc Size: 228KB - Virtual size: 227KB

.reloc Size: 32KB - Virtual size: 31KB

.text
Size: 552KB - Virtual size: 549KB

.data
Size: 16KB - Virtual size: 17KB

.rsrc
Size: 228KB - Virtual size: 227KB

.reloc
Size: 32KB - Virtual size: 31KB