071c6241ebb65ddd1a7a2537f95052db_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

071c6241ebb65ddd1a7a2537f95052db_JaffaCakes118
Size

216KB
MD5

071c6241ebb65ddd1a7a2537f95052db
SHA1

6f4e37120098ee50daff01b5a695b9b26aaade55
SHA256

dec5a583305d27660f759fcbe3dff10de7a878582ecd00291451c4ddf703716e
SHA512

a8a2e3465632cbfd9290c175b203fd3384ce2035fbe7f29a6104c47df4a078e3e5e854500a5b8363d13078068398946bf780fc65824160a33d171813ddac7de2
SSDEEP

3072:8WGEn5JOiWSJ/Ehw7p7OxGfBtVn11i7PFydFQyPzSFMKc5l/PbC6jTY:T9KxGDVnzihMFQZSE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
071c6241ebb65ddd1a7a2537f95052db_JaffaCakes118

Files

071c6241ebb65ddd1a7a2537f95052db_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

b0ec3734191bb1425c4e7b23725bca21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalHandle
GlobalAlloc
LoadLibraryA
FlushInstructionCache
GetCurrentProcess
GetShortPathNameW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
DisableThreadLibraryCalls
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
GlobalFree
FreeResource
EnterCriticalSection
SetFilePointer
SetStdHandle
GetLocaleInfoW
FlushFileBuffers
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
IsBadCodePtr
LeaveCriticalSection
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
VirtualAlloc
VirtualFree
HeapCreate
HeapSize
TerminateProcess
ExitProcess
TlsGetValue
TlsFree
TlsAlloc
TlsSetValue
RaiseException
GetVersion
GetCommandLineA
GetTimeZoneInformation
GetLocalTime
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
LocalFree
GetModuleHandleW
GetModuleHandleA
GetProcAddress
LoadLibraryW
OutputDebugStringA
SetLastError
GetModuleFileNameW
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
CreateFileW
WriteFile
CloseHandle
GetVersionExW
GetCurrentThreadId
GlobalLock
GlobalUnlock
lstrlenA
InterlockedDecrement
InterlockedIncrement
lstrcpyW
lstrlenW
lstrcmpW
lstrcatW
WideCharToMultiByte
IsBadWritePtr
MultiByteToWideChar

user32

SetScrollRange
ScreenToClient
GetScrollRange
DefWindowProcW
DrawTextW
SendMessageW
DrawIconEx
LoadIconW
FillRect
CopyRect
DispatchMessageW
TranslateMessage
CharUpperW
PostMessageW
GetWindowRect
ShowWindow
SetWindowTextW
SetScrollPos
GetForegroundWindow
CharNextW
GetClassNameW
GetDlgItem
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
CreateAcceleratorTableW
GetDesktopWindow
RedrawWindow
BeginPaint
EndPaint
IsChild
GetSysColor
wsprintfW
GetSubMenu
LoadMenuW
CreateWindowExW
ReleaseDC
GetKeyState
CallNextHookEx
GetFocus
MoveWindow
MapWindowPoints
TrackPopupMenu
DestroyMenu
GetParent
CheckDlgButton
EndDialog
GetWindowTextLengthW
GetWindow
GetClassInfoExW
RegisterClassExW
RegisterWindowMessageW
LoadCursorW
DialogBoxIndirectParamW
GetActiveWindow
SetFocus
LoadBitmapW
SystemParametersInfoW
FindWindowW
FindWindowExW
GetDC
UnhookWindowsHookEx
IsWindow
DestroyWindow
SetWindowsHookExW
CallWindowProcW
GetWindowLongW
SetWindowLongW
GetClientRect
SetWindowPos
GetCursorPos
PtInRect
LoadStringW
GetWindowTextW
MapVirtualKeyW
keybd_event
GetScrollPos

gdi32

GetObjectW
CreateCompatibleBitmap
CreateCompatibleDC
SetTextColor
SetBkMode
DeleteObject
GetStockObject
CreateSolidBrush
SelectObject
GetTextMetricsW
BitBlt
CreateFontIndirectW
DeleteDC
GetDeviceCaps

advapi32

RegDeleteValueW
OpenSCManagerW
OpenServiceW
CreateServiceW
CloseServiceHandle
ChangeServiceConfigW
StartServiceW
RegSetValueExW
RegOpenKeyExW
RegEnumValueW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegCreateKeyW
RegCloseKey

shell32

ShellExecuteW

ole32

CoTaskMemRealloc
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
ReleaseStgMedium

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysStringLen
OleCreateFontIndirect
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
LoadTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0ec3734191bb1425c4e7b23725bca21

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 109KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 24KB - Virtual size: 28KB

.rsrc Size: 44KB - Virtual size: 40KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 112KB - Virtual size: 109KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 24KB - Virtual size: 28KB

.rsrc
Size: 44KB - Virtual size: 40KB

.reloc
Size: 12KB - Virtual size: 10KB