0995196d968ff7a4de713e1a8eff9af3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0995196d968ff7a4de713e1a8eff9af3_JaffaCakes118
Size

238KB
MD5

0995196d968ff7a4de713e1a8eff9af3
SHA1

560e025b5246b499140047d359b3ba3af2dc153d
SHA256

2af99afdf00126f78fbae213262f88b1adfa79a3a4d27243581865b21fe698c6
SHA512

70fc06fb95fe4d63ee24ea0d3be466268c745484162b18628a082c77a5373fa8d8dde335c48e14d0e24dfe8b852bd0966eea7eb6e32e99eec2768d20b8541bf6
SSDEEP

3072:jkdV0hcteCKdOJC2DWPgN0rlMRIglk726WD4taGzMey9YIKm6okrUmOKXdJR5yxv:jZCeXKDKOaM0QQjhxOa2U/W7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0995196d968ff7a4de713e1a8eff9af3_JaffaCakes118

Files

0995196d968ff7a4de713e1a8eff9af3_JaffaCakes118
.dll windows:1 windows x86 arch:x86

f8167e475efceda3fc2015a255f6562d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetMenu
GetMenuStringA
DrawMenuBar
TranslateAcceleratorA
RemoveMenu
GetMenuItemCount
ShowWindow
InflateRect
IntersectRect
GetMenu
GetSubMenu
GetWindowLongA
AppendMenuA
EnumChildWindows
InvertRect
IsMenu
SetClipboardData
GetDC
ReleaseDC
SetFocus
SendMessageA
SetActiveWindow
DestroyMenu
InvalidateRect
CreateMenu
SetParent
InsertMenuA
SetWindowPos
RegisterClipboardFormatA

gdi32

SetBkColor
CreateBitmap
CreatePatternBrush
PatBlt
DeleteDC
SetTextColor
SelectObject
Rectangle
DeleteObject
GetDeviceCaps
CreateICA

kernel32

GlobalLock
_lclose
_lread
GetLastError
SetFilePointer
GetCommandLineA
GetStdHandle
GetFileType
ExitProcess
VirtualFree
VirtualAlloc
GetStartupInfoA
GetACP
GetOEMCP
GetModuleFileNameA
WriteFile
SetStdHandle
GetCPInfo
OpenFile
CloseHandle
IsBadStringPtrA
IsBadReadPtr
IsBadWritePtr
GlobalSize
GetVersion
IsBadCodePtr
lstrlenA
GetEnvironmentStrings
GlobalReAlloc
GlobalUnlock
GlobalAlloc
GlobalFree
SetErrorMode
MultiByteToWideChar
WideCharToMultiByte
FlushFileBuffers
_lwrite
_llseek
_hread
_hwrite

advapi32

RegQueryValueA

ole32

StgOpenStorage
OleCreateLinkToFile
OleCreateFromData
OleCreateLinkFromData
OleGetClipboard
CreateDataAdviseHolder
CreateOleAdviseHolder
OleQueryCreateFromData
OleQueryLinkFromData
OleLoad
CoIsOle1Class
OleRun
CreateBindCtx
OleNoteObjectVisible
SetConvertStg
GetConvertStg
ProgIDFromCLSID
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleSetContainedObject
ReleaseStgMedium
StgIsStorageFile
StgCreateDocfile
OleCreateFromFile
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
OleTranslateAccelerator
WriteClassStm
ReadClassStm
CLSIDFromString
OleCreate
OleIsRunning
OleSave
ReadFmtUserTypeStg
WriteClassStg
WriteFmtUserTypeStg
OleSetMenuDescriptor
CoLockObjectExternal
CoGetCurrentProcess
OleBuildVersion
CoBuildVersion
CoDisconnectObject
CoRevokeClassObject
OleUninitialize
OleInitialize
CoRegisterClassObject
CoGetMalloc

Exports

Exports

MatActivate
MatAssignDocumentFh
MatCloneObject
MatCloseFh
MatCloseMatstm
MatCommitFh
MatCreateDocument
MatCreateObject
MatDeleteObject
MatDlgForConvert
MatDlgForEditLinks
MatDlgForInsertObj
MatDlgForPasteSpec
MatDoInPlaceDeactivate
MatDoVerbObject
MatDrawObject
MatEnsureAccessFh
MatEnumObjectVerbs
MatFDocfileLpsz
MatFIsDocfileFh
MatFhOpenFile
MatGetClassLong
MatGetClassWord
MatGetData
MatGetFhSummaryInfo
MatGetInPlaceRect
MatGetInfo
MatGetObjectClassName
MatGetObjectExtents
MatGetOleHelpMsg
MatGetVersions
MatInitialize
MatIsActive
MatLReadFromFh
MatLSeekInFh
MatLSizeFh
MatLWriteToFh
MatLoadDocument
MatLoadObject
MatMfeGet
MatName
MatNoUndoObject
MatOleTranslateAccelerator
MatOpenDocument
MatOpenMatstm
MatQueryObjectType
MatQueryPasteObject
MatReleaseDocument
MatReleaseObject
MatRevertFh
MatRevertObject
MatSaveCompleted
MatSaveDocument
MatSaveDocumentInfo
MatSaveNativeData
MatSaveObject
MatSaveObjects
MatSendMessage
MatSetChanged
MatSetClassLong
MatSetClassWord
MatSetData
MatSetDocumentPrinter
MatSetFhSummaryInfo
MatSetHostNames
MatSetObjectExtents
MatSetRects
MatShowObject
MatStatOfFh
MatTerminate
MatTranslateAccelerator
MatUIDrawShading
MatUIEnableBusyDialog
MatUIRecomposeOnResize
MatUISetPasteSource
MatUndoRedoObject
MatUpdateObject

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8167e475efceda3fc2015a255f6562d

Headers

File Characteristics

Imports

user32

gdi32

kernel32

advapi32

ole32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 55KB

.bss Size: - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 5KB

.idata Size: 3KB - Virtual size: 3KB

.edata Size: 166KB - Virtual size: 166KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 55KB - Virtual size: 55KB

.bss
Size: - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 5KB

.idata
Size: 3KB - Virtual size: 3KB

.edata
Size: 166KB - Virtual size: 166KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 2KB