098823dfc881f8c7d05be54c3920e417_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

098823dfc881f8c7d05be54c3920e417_JaffaCakes118
Size

260KB
MD5

098823dfc881f8c7d05be54c3920e417
SHA1

0f2e2e65c7c277fe7eeb1b6ba62f960a4f407012
SHA256

ffaab92473751b29da0682f796bc3c2e311da6b272906268ae8f1b7854f8cedd
SHA512

56dcc075eecaba977fc3a3fc7a5e42a69f12a5dc3fcca3eb882804c8ece61c193fdf7736c8f9172f8a75c5ae848a661908a1f359f1570134d194d10af00090fb
SSDEEP

6144:hSruJWldtfOrG+olqb8rfr48R4UOkFCl9hdoIBQrz:hTWld4y+oYbkEMBCP4Imr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
098823dfc881f8c7d05be54c3920e417_JaffaCakes118

Files

098823dfc881f8c7d05be54c3920e417_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9e558cbdd905821cb17427950278d5ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueA
RegSetValueExA

kernel32

IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsDBCSLeadByte
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LocalAlloc
LocalFree
LocalLock
LocalUnlock
LockResource
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ResetEvent
ResumeThread
RtlUnwind
SetEndOfFile
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetVersion
GetTimeFormatA
GetTickCount
GetThreadLocale
GetTempPathA
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryA
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetFileSize
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStringsA
GetDateFormatA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushInstructionCache
FlushFileBuffers
FindResourceExA
FindResourceA
FindFirstFileA
FileTimeToSystemTime
ExitProcess
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteCriticalSection
CreateThread
CreateMutexA
CreateFileMappingA
CreateFileA
CreateEventA
CloseHandle

gdi32

TextOutA
StretchDIBits
StretchBlt
SetWindowOrgEx
SetWindowExtEx
SetWinMetaFileBits
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetStretchBltMode
SetROP2
SetMetaFileBitsEx
SetMapMode
SetEnhMetaFileBits
SetDIBitsToDevice
SetBkMode
SetBkColor
SelectPalette
SelectObject
SelectClipRgn
RoundRect
Rectangle
RealizePalette
PtInRegion
Polygon
PolyBezier
PlayMetaFile
PlayEnhMetaFile
Pie
MoveToEx
LineTo
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectType
GetObjectA
GetMapMode
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetClipRgn
FrameRgn
FillRgn
Escape
Ellipse
DeleteObject
DeleteMetaFile
DeleteEnhMetaFile
DeleteDC
DPtoLP
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePen
CreatePatternBrush
CreatePalette
CreateHatchBrush
CreateEllipticRgn
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CombineRgn
BitBlt
Arc

ole32

CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance

user32

IntersectRect
wvsprintfA
wsprintfA
UnregisterClassA
UnhookWindowsHookEx
AppendMenuA
AppendMenuW
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcA
CharNextA
ClientToScreen
CloseClipboard
CopyRect
CreateCaret
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DestroyCaret
DestroyMenu
DestroyWindow
DialogBoxParamA
DispatchMessageA
EmptyClipboard
EnableWindow
EndDialog
EndPaint
EnumChildWindows
FillRect
GetActiveWindow
GetCapture
GetClassInfoExA
GetClientRect
GetClipboardData
GetCursor
GetCursorPos
GetDC
GetDesktopWindow
GetFocus
GetKeyState
GetParent
GetScrollInfo
GetSystemMetrics
GetWindowLongA
GetWindowRect
InvalidateRect
InvalidateRgn
IsClipboardFormatAvailable
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
KillTimer
LoadCursorA
MapWindowPoints
MessageBoxA
MoveWindow
OpenClipboard
PeekMessageA
PostMessageA
PostThreadMessageA
PtInRect
RegisterClassExA
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetDlgItemInt
SetDlgItemTextA
SetFocus
SetRect
SetRectEmpty
SetScrollInfo
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowWindow
TrackPopupMenuEx
TranslateMessage

Exports

Exports

Burn
ConvertToCIFFJPEG
D3D10SetDirect3DDevice
D3D9SetDirect3DDevice
DevelopNormalTblToLogTbl
EjectLoadCD
EnumFlashSettingRelease
EnumVolumeReset
GetAPIVersionEx
GetExtractJpegSize_ByModelName
GetFile2
GetLocalizedWaitCDTexts
GetSplineArray
ReadAtCapDevParamFromRAW
SetDoubleForDevice

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e558cbdd905821cb17427950278d5ee

Headers

File Characteristics

Imports

advapi32

kernel32

gdi32

ole32

user32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 164KB

.data Size: 84KB - Virtual size: 116KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 164KB - Virtual size: 164KB

.data
Size: 84KB - Virtual size: 116KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB