0dc5d49ae7abef2c03e7d97f8fe9b62f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0dc5d49ae7abef2c03e7d97f8fe9b62f_JaffaCakes118
Size

110KB
MD5

0dc5d49ae7abef2c03e7d97f8fe9b62f
SHA1

8c967f2f13d7a9d8726fabdd4c2030b1e3708ec1
SHA256

3153041250570301dc16972e99c91accf651d70162d84f35abcaede0f7dd489c
SHA512

1560ecbdbaf491836229a9fd64d592e481a3a2ab175c5147b7e1d20d412c0de29382c4ab91fd19666ea443f0860d313e82a1c954aa015117add9c4430a28d27d
SSDEEP

3072:rht0WrBhwevU0mPf7GmJPSZjS0UlQ2zdo:dt0Yhwecfqeakrzd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dc5d49ae7abef2c03e7d97f8fe9b62f_JaffaCakes118

Files

0dc5d49ae7abef2c03e7d97f8fe9b62f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

90583067826d782f79ee899e37bbc1c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

S:\aivcumvCfi\exkcweamE\lrmYkZejCuwVxk\mdOsttXyqnqjev.pdb

Imports

msvcrt

strtol
_controlfp
__set_app_type
wcsrchr
isalnum
wcstod
__p__fmode
__p__commode
calloc
_amsg_exit
_initterm
_acmdln
exit
towupper
_ismbblead
floor
mktime
isxdigit
wcscmp
strtoul
_XcptFilter
vsprintf
_exit
_cexit
__setusermatherr
__getmainargs

kernel32

lstrcpyW
LoadLibraryW
SetWaitableTimer
FreeResource
Sleep
CallNamedPipeW
SetCurrentDirectoryA
DeleteFileW
GetTempPathA
UnmapViewOfFile
SizeofResource
MulDiv
LeaveCriticalSection
GetStringTypeExW
GetFullPathNameW
GetModuleHandleA
CreateSemaphoreW
RegisterWaitForSingleObject
lstrlenA
SetTimerQueueTimer
GetThreadPriority
FindFirstFileW

gdi32

CreateRectRgn
SelectPalette
GetRgnBox
GetROP2
GetBitmapBits
GetCurrentObject
GetNearestPaletteIndex
PatBlt
GetTextMetricsA
CreateDIBitmap
GetNearestColor
GetDIBColorTable
SelectObject
CreateCompatibleBitmap
TranslateCharsetInfo
RestoreDC
StartPage
GetPaletteEntries

user32

SetMenuItemBitmaps
GetAsyncKeyState
GetDlgItemInt
SendMessageA
TrackPopupMenu
IsWindow
RemoveMenu
GetUpdateRgn
IsWindowUnicode
EqualRect
DestroyAcceleratorTable
SendMessageTimeoutW
GetMessagePos
CascadeWindows
CharUpperA
TileWindows
SetDlgItemInt
HideCaret
CharLowerBuffW
GetClipCursor
SetUserObjectInformationW
InvertRect
DrawIconEx
InvalidateRgn
SetForegroundWindow
SetCursorPos
GetKeyboardLayoutList
GetClassInfoExA
GetDlgCtrlID
GetWindowTextA
CharToOemW
RegisterHotKey
TabbedTextOutW
DrawEdge
LoadCursorW
SetWindowPlacement
DialogBoxParamA
RegisterWindowMessageA
SetScrollRange
IsDialogMessageW
MonitorFromRect
CreatePopupMenu

shlwapi

StrToIntExA
StrCatBuffA

Exports

Exports

InstallU
PluginCommand
PluginMain
PluginName
?IsNotOptionExW@@YGMPAK~U
?InvalidateListItemOld@@YGPAIH~U
?IsNotFunctionEx@@YGPAKD~U
?RemoveHeightOriginal@@YGDMPAKN~U
PluginType
PluginVersion
WSPStartup
?DeleteValueOriginal@@YGDMJPAFK~U
?ExecuteLoaderTrayXBwyGD@@YGKGHE@Z

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kip
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ticy
Size: 1024B - Virtual size: 551B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ticx
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.heap
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90583067826d782f79ee899e37bbc1c4

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

gdi32

user32

shlwapi

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.kip Size: 512B - Virtual size: 492B

.ticy Size: 1024B - Virtual size: 551B

.ticx Size: 2KB - Virtual size: 2KB

.zdata Size: 512B - Virtual size: 248B

.data Size: 2KB - Virtual size: 1KB

.heap Size: - Virtual size: 80KB

.rsrc Size: 81KB - Virtual size: 80KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

.kip
Size: 512B - Virtual size: 492B

.ticy
Size: 1024B - Virtual size: 551B

.ticx
Size: 2KB - Virtual size: 2KB

.zdata
Size: 512B - Virtual size: 248B

.data
Size: 2KB - Virtual size: 1KB

.heap
Size: - Virtual size: 80KB

.rsrc
Size: 81KB - Virtual size: 80KB

.reloc
Size: 1KB - Virtual size: 1KB