0ea8bf94e247cf97beb6d8471df98457_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0ea8bf94e247cf97beb6d8471df98457_JaffaCakes118
Size

191KB
MD5

0ea8bf94e247cf97beb6d8471df98457
SHA1

78819e50c10c674b716cd58b77e116c82ccef041
SHA256

66f9a89fb24d4727872bc291292aff98404da10246f88b498456e8ee11617663
SHA512

c1593f3a2914961818243cebe5d9613fb2266e61260bb236d408a266a2e92f7eef2d7bb671ad813e6298fc2bd837bddf87dd43f7fb693b7bbfd20e71736b4095
SSDEEP

3072:DdblUFpIVcEjuvOwh1eRGJNby/aj1G0cxA32k9R5/erQxNKMg+pOixqsuTtrfeyW:Ddb+yj6PqRGEaJG0Qwz2kfKJmMFX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ea8bf94e247cf97beb6d8471df98457_JaffaCakes118

Files

0ea8bf94e247cf97beb6d8471df98457_JaffaCakes118
.dll windows:5 windows x86 arch:x86

9e010315b1b854069decec73d0f269e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

GetOpenFileNameW
ChooseColorW
ReplaceTextW
GetSaveFileNameW

gdi32

GetROP2
TextOutA
ResizePalette
LPtoDP
SetLayout
CreateRectRgnIndirect
CreateHatchBrush
LineDDA
SetBitmapBits
GetPaletteEntries
CreateFontA
WidenPath
SelectPalette
SetPaletteEntries
SetBkColor
EndPage
Polyline
GetBkMode
GetRgnBox
CreatePalette
RemoveFontResourceW
IntersectClipRect
GetBitmapBits
SetMapMode
AddFontResourceW
GetTextAlign
SetDIBColorTable
CreateBitmapIndirect
CreateSolidBrush
GetTextExtentPointW
PtInRegion
GetNearestColor
Escape
CreatePolygonRgn
SetViewportOrgEx
PolyBezier
StretchDIBits
GetDeviceCaps
SetTextAlign
CombineRgn
GetTextMetricsA
GetTextCharsetInfo
GetSystemPaletteUse
CreateRoundRectRgn
CreateDIBitmap

comctl32

CreatePropertySheetPageA
ImageList_Draw
ImageList_GetIconSize
ImageList_Write
DestroyPropertySheetPage
CreateToolbarEx

kernel32

lstrcpyA
TryEnterCriticalSection
FindResourceA
EnumResourceTypesA
GetLastError
HeapAlloc
GetTempPathW
FindAtomW
SetCommMask
IsDBCSLeadByte
GlobalReAlloc
HeapWalk
SetTimerQueueTimer
WideCharToMultiByte
WaitCommEvent
GetTimeFormatA
HeapReAlloc
FindAtomA
GlobalMemoryStatus
GetStartupInfoW
RtlUnwind
GlobalAlloc
GetCurrentThread
GlobalGetAtomNameW
GetPriorityClass
GetFileAttributesA
GetSystemWindowsDirectoryA
LeaveCriticalSection
GetNumberFormatW
GetCommandLineA
GetComputerNameExW
FoldStringW
GlobalCompact
GetEnvironmentStringsW
MoveFileW
GetCPInfo
CreateRemoteThread
UnlockFile
GlobalAddAtomW
CopyFileA
GetThreadLocale
GetCompressedFileSizeW
FindFirstChangeNotificationW
WaitForMultipleObjectsEx
lstrcatA
GetSystemInfo
GetUserDefaultLangID
FormatMessageW
VirtualLock
ConnectNamedPipe
GetModuleHandleW
GetStringTypeExW
SetCurrentDirectoryW
GetThreadTimes

user32

IsRectEmpty
GetClassLongW
SetMenuItemBitmaps
IntersectRect
GetClassLongA
MessageBoxW
PtInRect
IsChild
InvertRect
GetClientRect
GetMessageW
RegisterClassA
DrawFrameControl
CreateAcceleratorTableW
CheckMenuItem
GetNextDlgGroupItem
UpdateWindow
MapVirtualKeyA
CharNextW
InvalidateRgn
GetAsyncKeyState
LoadCursorA
GetScrollPos
FrameRect
MonitorFromRect
SetParent
FindWindowExA
CopyImage
ScrollWindow
LockWindowUpdate
ScrollWindowEx
UnionRect
GetMenuStringA
GetUpdateRect
GetUserObjectInformationA
TranslateAcceleratorA
DialogBoxParamW
GetClassInfoW
GetMenuCheckMarkDimensions
IsDialogMessageW
GetParent
GetMenuItemCount
GetMenu
SetWindowPos
SetDlgItemTextA
CharLowerA
GetWindowTextA
BeginPaint
CharLowerW
GetSysColorBrush
PostThreadMessageW
DispatchMessageA
GetWindow
InvalidateRect
LoadAcceleratorsW
EnumChildWindows
CreateCursor
ShowWindowAsync
DrawTextA
CreateWindowExW
GetClipCursor
SendMessageW
InsertMenuItemW
GetWindowTextW
OemToCharA
SwitchToThisWindow
GetMenuItemInfoW
CreateWindowExA
CharToOemBuffA
LoadStringW
ReplyMessage
LoadBitmapA
InflateRect
GetActiveWindow
SetCursor
ToUnicodeEx
OpenInputDesktop
DefDlgProcA
CallWindowProcW
OpenDesktopW
EndDialog
SetCaretPos
mouse_event
GetDlgItemInt
GetForegroundWindow
GetClassInfoExA
DefFrameProcA
CharToOemW
RegisterWindowMessageA
LoadIconA
TrackPopupMenuEx
DrawStateW
RegisterClassExA
keybd_event
GetUpdateRgn
SetRectEmpty
DrawMenuBar
SendDlgItemMessageA
ClipCursor
SetForegroundWindow
GetIconInfo
CreateCaret
SetUserObjectInformationW
MonitorFromPoint
SetTimer
SendNotifyMessageW
GetNextDlgTabItem
SetDlgItemTextW
CallWindowProcA

msvcrt

strspn
_controlfp
free
realloc
__set_app_type
mbtowc
__p__fmode
wcsstr
sprintf
__p__commode
strncmp
fprintf
_amsg_exit
gmtime
remove
vswprintf
towupper
wcsrchr
_initterm
_ismbblead
fflush
gets
strpbrk
strtoul
srand
setlocale
exit
strcpy
isalpha
bsearch
_XcptFilter
fgets
_exit
wcslen
clock
_cexit
clearerr
__setusermatherr
atoi
mbstowcs
islower
wcstoul
wcstod
__getmainargs

Exports

Exports

?SetSystem@@YG_NIPAGDPAM<V

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e010315b1b854069decec73d0f269e8

Headers

File Characteristics

Imports

comdlg32

gdi32

comctl32

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 65KB

.data Size: 122KB - Virtual size: 205KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 66KB - Virtual size: 65KB

.data
Size: 122KB - Virtual size: 205KB

.reloc
Size: 2KB - Virtual size: 1KB