05487f9c8350fc8fd1c84f74049a6113_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

05487f9c8350fc8fd1c84f74049a6113_JaffaCakes118
Size

256KB
MD5

05487f9c8350fc8fd1c84f74049a6113
SHA1

5b3cf977f59e1874bcc08051a9c4f2c3e46b154e
SHA256

caf670889ece9e7c5a0387bcd13fc1dceaff01a7a5db8ac41575877e844916ce
SHA512

d00d0abc6b0c2502e32af12ed9f3c309bf8162289ee741950dfb9fb0716daed3b62913646f48de6f7d5f912e936f3cf6cb6406df1b717f08649172546bd50d96
SSDEEP

3072:WhtmqzOLqc+WvXGv180z8GKznMoGsEYzUa2yNtZg57mwP/2tio0PTo3Nb/kRXapX:9T218WyrTmsEoURyyaEg8ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05487f9c8350fc8fd1c84f74049a6113_JaffaCakes118

Files

05487f9c8350fc8fd1c84f74049a6113_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3835c99e46379636677f40404b36541b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
GetTimeZoneInformation
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetCommandLineA
RtlUnwind
GetTickCount
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
GlobalFlags
GetProcessVersion
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetCurrentThread
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
MulDiv
GetModuleHandleA
SetLastError
lstrcmpiA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcmpA
GlobalFree
GlobalAlloc
GlobalLock
lstrlenW
WideCharToMultiByte
lstrlenA
GetModuleFileNameA
GlobalUnlock
SetUnhandledExceptionFilter
GlobalReAlloc

user32

SetRect
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
MapDialogRect
SetWindowContextHelpId
CharNextA
GetDesktopWindow
PtInRect
GetClassNameA
GetSysColorBrush
LoadCursorA
UnregisterClassA
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
LoadIconA
PostMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
IsWindowVisible
ScrollWindow
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
CopyAcceleratorTableA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
LoadStringA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindowPlacement
OffsetRect
RegisterWindowMessageA
FindWindowA
GetSysColor
SetWindowLongA
GetWindowLongA
RedrawWindow
SendMessageA
GetWindow
EnableWindow
GetScrollInfo
SystemParametersInfoA
GetWindowRect
UpdateWindow
IsIconic
IsChild
InvalidateRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
EndDialog
MessageBoxA
CreateDialogIndirectParamA
ScreenToClient
CopyRect
GetDC
ReleaseDC
SetFocus
IsWindowEnabled
ShowWindow
SetWindowPos
MoveWindow
GetDlgCtrlID
GetNextDlgTabItem
GetParent
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
AdjustWindowRectEx
GetClientRect
IsWindow
wsprintfA
CharUpperA
GetSystemMetrics
GetDlgItem
SendDlgItemMessageA
IsDialogMessageA
SetWindowTextA
GetWindowTextA
CallWindowProcA

gdi32

RectVisible
TextOutA
ExtTextOutA
Escape
LPtoDP
DPtoLP
GetObjectA
PtVisible
GetBkColor
GetMapMode
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
GetTextColor
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysFreeString
VariantClear
VariantInit
VariantCopy
VariantChangeType
SysAllocStringLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SysAllocStringByteLen
SysStringLen
LoadTypeLi
VariantTimeToSystemTime

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3835c99e46379636677f40404b36541b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 144KB - Virtual size: 143KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 32KB - Virtual size: 44KB

.rsrc Size: 8KB - Virtual size: 7KB

.data Size: 28KB - Virtual size: 25KB

.text
Size: 144KB - Virtual size: 143KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 32KB - Virtual size: 44KB

.rsrc
Size: 8KB - Virtual size: 7KB

.data
Size: 28KB - Virtual size: 25KB