0692200aa28664f8c6370bf499cfb430_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0692200aa28664f8c6370bf499cfb430_JaffaCakes118
Size

72KB
MD5

0692200aa28664f8c6370bf499cfb430
SHA1

ac5872034db9add662e1de6af0d68848d8d8f840
SHA256

c581d047d157c1e345c642259db23f7d81582b04c881c1aedf5ec270e42f81bd
SHA512

955d09155b14e9f08e58513c3a0bd5f5ba121d7c2c9041cbba551179acb4ed054006303c6a365fddb583f4272b206668a5027dede97c06c8f0e5afca4de6d94c
SSDEEP

768:knaQ46KcdJrLNoGu87dzDUYzAUdRkbbCG3n9N1k1EC11AXElQ3RG6ts:kgc3e+pDZO2G39Tk1z11YGQFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0692200aa28664f8c6370bf499cfb430_JaffaCakes118

Files

0692200aa28664f8c6370bf499cfb430_JaffaCakes118
.dll windows:4 windows x86 arch:x86

74ccb08579927b6cc7aaebcc099c1c25

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dwgui

??1CDwWindowPlacement@@UAE@XZ
?LoadWindowPos@CDwWindowPlacement@@UAEHPAVCWnd@@HPBD11@Z
?SaveWindowPos@CDwWindowPlacement@@UAEXPAVCWnd@@@Z
?DDX_DwColorPicker@@YGXPAVCDataExchange@@HAAK@Z
?SetColor@CDwColorPicker@@QAEXH@Z
?CreateColorEntryByIndex@CDwColorPicker@@QAEXPBHHPAUHPALETTE__@@PBDH2K2HH@Z
?GetColorIndex@CDwColorPicker@@QAEHPBH@Z
??0CDwColorPicker@@QAE@XZ
??1CDwColorPicker@@UAE@XZ
??1CSizingControlBarG@@UAE@XZ

mpcapi

ord24
ord29
ord22

mppmodel

_MPPMSetDocumentAttribute@16
_MPPMGetDocumentAttributeByName@20

mpuisvc

?GetMPPaperIDFromSize@@YGIPAUMP_Dim@@@Z
?IsSupportedPaper@@YGHI@Z
?GetMPPaperName@@YGHIPAD@Z

mfc42

ord4837
ord5290
ord4402
ord3640
ord1776
ord3370
ord5162
ord5160
ord4424
ord5161
ord4976
ord4948
ord4358
ord4905
ord4377
ord4854
ord4998
ord2514
ord6052
ord4742
ord1775
ord4407
ord5265
ord2385
ord5163
ord6374
ord4353
ord5287
ord3798
ord4078
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord5241
ord3259
ord4465
ord3136
ord3262
ord4835
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord693
ord768
ord501
ord567
ord3147
ord825
ord773
ord5600
ord2302
ord4258
ord4710
ord800
ord4160
ord540
ord6905
ord1083
ord535
ord858
ord3721
ord3610
ord2411
ord2023
ord4218
ord2578
ord4398
ord3402
ord3582
ord616
ord795
ord656
ord2985
ord2298
ord2370
ord6199
ord6215
ord2642
ord922
ord3092
ord6467
ord6334
ord1907
ord489
ord3626
ord3663
ord2414
ord640
ord2452
ord2753
ord5785
ord6021
ord1640
ord323
ord1641
ord1146
ord2289
ord6741
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord2575
ord4396
ord3574
ord6508
ord609
ord6055
ord2358
ord537
ord2817
ord6921
ord3811
ord5572
ord2915
ord3874
ord3803
ord2614
ord3317
ord1199
ord1200
ord4129
ord2819
ord548
ord6920
ord2776
ord3301
ord2864
ord5981
ord5607
ord1908
ord1690
ord2528
ord5288
ord4439
ord2054
ord4431
ord771
ord1008
ord496
ord4259
ord4715
ord6930
ord939
ord2818
ord6663
ord941
ord1168
ord4274
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord3953
ord1134
ord2725
ord772
ord5860
ord500
ord5710
ord547
ord5683
ord2582
ord823
ord3571
ord860
ord692
ord1577
ord1182
ord269
ord826
ord600
ord1578
ord1255
ord1253
ord1197
ord1575
ord342
ord1116
ord1243
ord1570
ord1176

msvcrt

_adjust_fdiv
_except_handler3
malloc
??1type_info@@UAE@XZ
_strdup
strncpy
__CxxFrameHandler
?terminate@@YAXXZ
_onexit
_initterm
__dllonexit
free
_makepath
memcmp
_atoi64
strcpy
strcmp
_mbsicmp
_ismbcdigit
_mbsbtype
_splitpath
_ftol
ceil
memset
strlen
_mbscmp

kernel32

SystemTimeToFileTime
LocalAlloc
LocalFree
FindFirstFileA
FindClose
lstrcmpA
lstrcpyA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
FreeLibrary
GetSystemDefaultLCID
GetVolumeInformationA
GetLocaleInfoA
FileTimeToSystemTime

user32

GetSysColor
wsprintfA
GetClientRect
EnableWindow
SendMessageA
LoadBitmapA
GetFocus

gdi32

GetObjectA
CreateCompatibleDC
BitBlt
DeleteObject

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Exports

Exports

??0CDwWindowPlacement@@QAE@ABV0@@Z
??1CSizingControlBarCF@@UAE@XZ
??4CDwWindowPlacement@@QAEAAV0@ABV0@@Z
??_7CDwWindowPlacement@@6B@
?GetBkColor@CDwColorPicker@@QAEKXZ
?GetIconMode@CDwToolBar@@QAEIXZ
?GetSCBStyle@CSizingControlBar@@QBE?BHXZ
?GetTextColor@CDwColorPicker@@QAEKXZ
?SetSCBStyle@CSizingControlBar@@QAEXK@Z
DWPROP_DeleteDocPropData
DWPROP_GetDocProperty
DWPROP_GetDocPropertyEX
DWPROP_GetMPProperty
DWPROP_GetPageProperty
DWPROP_GetPaperNameFromID
DWPROP_OpenGetPageProperty
DWPROP_OpenShowPropSheet
DWPROP_OpenShowPropSheetEX
DWPROP_SetDocProperty
DWPROP_ShowPropSheet
DWPROP_ShowPropSheetEX

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74ccb08579927b6cc7aaebcc099c1c25

Headers

File Characteristics

Imports

dwgui

mpcapi

mppmodel

mpuisvc

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 8KB - Virtual size: 4KB