0c29ce5063cc880d4ad33146355dfbaa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0c29ce5063cc880d4ad33146355dfbaa_JaffaCakes118
Size

448KB
MD5

0c29ce5063cc880d4ad33146355dfbaa
SHA1

dd9cea7d5526412086af7b1ee329747615be95f3
SHA256

b2ff3131a0a76f7ed025fdeeb2d13c1a5029f8abd754293a91b2be0495855bc1
SHA512

faa0b049563a610e5ad4d2e00a30ce3ec1b2ba2902d76296228b517b8347010045dfb2ef4b72c09356da0684ac3f2eee9f62f8cc59c247d6c29d234928877415
SSDEEP

6144:ijCCa8qhYyB4fxUJfaL3rgfIZqEDcKj4fQArDOeGCFAPgLcYOX+83Lw3NP2C:r8qP6Uk2IrDJUfDAPgyLwdPt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c29ce5063cc880d4ad33146355dfbaa_JaffaCakes118

Files

0c29ce5063cc880d4ad33146355dfbaa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

590a44b38f45a5504d42f51b4340d164

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

SHRegDuplicateHKey

kernel32

GetCommandLineW
GlobalAlloc
LocalAlloc
GetProfileStringW
GetProfileIntW
LoadLibraryA
GetStartupInfoA
LocalFree
LocalReAlloc
lstrlenW
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
GetProcAddress
GlobalCompact
CloseHandle
GetLocalTime
GlobalReAlloc
lstrcmpW
Sleep
WriteProfileStringW
GlobalLock
GlobalSize
GlobalUnlock
CreateEventW
CreateThread
ResetEvent
SetEvent
WaitForSingleObject
SetCommTimeouts
HeapAlloc
GetProcessHeap
HeapFree
GetUserDefaultLCID
GetDateFormatW
GetTimeFormatW
GetFileInformationByHandle
CreateFileMappingW
MapViewOfFile
UnhandledExceptionFilter
GetLocaleInfoW
LocalUnlock
CompareStringW
LocalLock
FoldStringW
lstrcpyW
ReadFile
CreateFileW
lstrcmpiW
lstrcatW
FindClose
FindFirstFileW
GetFileAttributesW
MulDiv
lstrcpynW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
FormatMessageW
MultiByteToWideChar
UnmapViewOfFile
GetACP
DeleteFileW
SetEndOfFile
GetUserDefaultUILanguage
GlobalFree

user32

TranslateAcceleratorW
TranslateMessage
DispatchMessageW
IsChild
GetWindowRect
SetMenu
CharNextW
DestroyMenu
GetDlgItem
CreateDialogParamW
GetMenu
GetWindowLongW
SetWindowLongW
LoadMenuW
EnableWindow
GetClientRect
MapWindowPoints
OffsetRect
SetWindowPos
CheckMenuRadioItem
CheckMenuItem
SetDlgItemTextW
SendMessageW
ShowWindow
UpdateWindow
InvalidateRect
LoadIconW
LoadCursorW
GetSysColorBrush
RegisterClassExW
MessageBeep
EndDialog
DialogBoxParamW
GetSysColor
CloseClipboard
CharNextA
GetClipboardData
OpenClipboard
GetDesktopWindow
TrackPopupMenuEx
EnableMenuItem
IsClipboardFormatAvailable
DefWindowProcW
ChildWindowFromPoint
ScreenToClient
GetDlgCtrlID
PostQuitMessage
WinHelpW
DrawTextW
CallWindowProcW
HideCaret
CheckDlgButton
GetWindowTextW
SetDlgItemInt
DestroyWindow
IsDialogMessageW
GetMessageW
LoadAcceleratorsW
CreateWindowExW
MessageBoxW
LoadStringW
SetProcessDefaultLayout
GetProcessDefaultLayout
SetWinEventHook
PostMessageW
UnhookWinEvent
GetParent
GetDlgItemTextW
wsprintfW
GetMenuState
SendDlgItemMessageW
GetCursorPos
MoveWindow
GetSystemMetrics
SetCursor
SetFocus
SetWindowTextW
CheckRadioButton
GetSubMenu
DrawTextExW
PeekMessageW
CharLowerW
SetScrollPos
RegisterWindowMessageW
GetFocus
ReleaseDC
GetDC
SetWindowPlacement
LoadImageW
GetSystemMenu
CharUpperW
GetWindowPlacement
IsIconic
GetForegroundWindow
GetKeyboardLayout
SetActiveWindow
SystemParametersInfoW

advapi32

RegSetValueExW
IsTextUnicode
RegCreateKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

msvcrt

memset
toupper
wcschr
memmove
wcslen
_wcsrev
_exit
wcstoul
exit
wcsncpy

shell32

DragFinish
ShellAboutW
DragQueryFileW
DragAcceptFiles

winmm

mmioInstallIOProcA

winspool.drv

OpenPrinterW
GetPrinterDriverW
ClosePrinter

comctl32

CreateStatusWindowW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW
ChooseFontW
CommDlgExtendedError
ReplaceTextW
PrintDlgExW
FindTextW
PageSetupDlgW

gdi32

SelectObject
SetMapMode
SetViewportExtEx
SetWindowExtEx
LPtoDP
GetTextMetricsW
DeleteObject
CreateFontIndirectW
GetDeviceCaps
GetObjectW
GetStockObject
EnumFontsW
StartDocW
TextOutW
GetTextFaceW
SetAbortProc
CreateDCW
GetTextExtentPoint32W
StartPage
DeleteDC
EndDoc
AbortDoc
EndPage
SetTextColor
SetBkMode
SetBkColor

Exports

Exports

qzdwpp

Sections

.code
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

590a44b38f45a5504d42f51b4340d164

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

msvcrt

shell32

winmm

winspool.drv

comctl32

comdlg32

gdi32

Exports

Exports

Sections

.code Size: 36KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 360KB - Virtual size: 359KB

.data Size: 4KB - Virtual size: 1B

.rdata Size: 4KB - Virtual size: 1B

.data Size: 4KB - Virtual size: 1B

.data Size: 4KB - Virtual size: 1B

.data Size: 4KB - Virtual size: 1B

.data Size: 4KB - Virtual size: 1B

.data Size: 4KB - Virtual size: 1B

.rsrc Size: 4KB - Virtual size: 1B

.rsrc Size: 4KB - Virtual size: 792B

.reloc Size: 4KB - Virtual size: 33KB

.code
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 360KB - Virtual size: 359KB

.data
Size: 4KB - Virtual size: 1B

.rdata
Size: 4KB - Virtual size: 1B

.data
Size: 4KB - Virtual size: 1B

.data
Size: 4KB - Virtual size: 1B

.data
Size: 4KB - Virtual size: 1B

.data
Size: 4KB - Virtual size: 1B

.data
Size: 4KB - Virtual size: 1B

.rsrc
Size: 4KB - Virtual size: 1B

.rsrc
Size: 4KB - Virtual size: 792B

.reloc
Size: 4KB - Virtual size: 33KB