1053b5af9c0281f4002a97a68d7ac077_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1053b5af9c0281f4002a97a68d7ac077_JaffaCakes118
Size

288KB
MD5

1053b5af9c0281f4002a97a68d7ac077
SHA1

d9463b0a5790e994e1fe9c3ede645801dcdebf3d
SHA256

0cbed7e182522c8157826b640382ae167fc67a5caa7223647d6c0abd5c0ff705
SHA512

1792649f6adc00641858507e7eae0fc4b2d310cf848c03cc96eed5c14553f57f672d6c7c5f089cff77818c497dd89e16cf51bb02f59baea88668e552e71d4bfb
SSDEEP

3072:S9A+IL2SeGvbfzhh0o3gHR4hjVkAzEgSj8jcmJwdVQ18sMldAFcczfKcwJ313vNi:S9LOzhh0o3gH2jKMI6qQSsZFffG35Qx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1053b5af9c0281f4002a97a68d7ac077_JaffaCakes118

Files

1053b5af9c0281f4002a97a68d7ac077_JaffaCakes118
.dll windows:4 windows x86 arch:x86

45b092ce287db00aa2672189e7516b43

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
strncpy
strrchr
_adjust_fdiv
malloc
free
_beginthreadex
_endthreadex
_ftol
strtol
_setmode
strchr

kernel32

GlobalAlloc
GlobalUnlock
GetPrivateProfileStringA
GetVersion
GlobalHandle
WritePrivateProfileStringA
SetThreadPriority
SetPriorityClass
GetThreadPriority
GlobalFree
GlobalLock
GetCurrentProcess
GetProcAddress
LoadLibraryA
SetErrorMode
FreeLibrary
_lread
GetPriorityClass
_lopen
_llseek
_lwrite
_lcreat
GetLastError
DeviceIoControl
CreateFileA
CloseHandle
WaitForSingleObject
TerminateThread
Sleep
SetEvent
CreateEventA
OpenEventA
GetCurrentThread
_lclose

advapi32

OpenSCManagerA
StartServiceA
CloseServiceHandle
OpenServiceA

user32

DispatchMessageA
EqualRect
UnionRect
ValidateRect
IntersectRect
MapWindowPoints
SetWindowPos
GetClientRect
GetWindowRect
KillTimer
SetTimer
UnhookWindowsHookEx
IsIconic
GetWindow
GetParent
RedrawWindow
GetDesktopWindow
CallNextHookEx
GetWindowThreadProcessId
SetWindowsHookExA
InvalidateRect
TranslateMessage
PeekMessageA
FillRect
SetRect
IsRectEmpty
GetActiveWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
wsprintfA
IsWindow
GetDC
ReleaseDC

gdi32

CreatePalette
GetSystemPaletteEntries
StretchDIBits
DeleteObject
CreateSolidBrush
GetBkColor
GetNearestColor
GetDeviceCaps
SelectPalette
RealizePalette
GetStockObject

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

Exports

Exports

AutoBlitProc
AutoBlitProcMulti
FB_AsyncGrab
FB_AutoBlit
FB_AutoWindow
FB_AutoWindowInfo
FB_CheckSwitch
FB_Cleanup
FB_ClearIRQ
FB_ClosePrivateProfileString
FB_ConvertPixel
FB_CopyVGARect
FB_EnableIRQ
FB_EnableVideoMask
FB_FileResInfo
FB_GetFieldType
FB_GetI2CReg
FB_GetIRQNumber
FB_GetLiveStatus
FB_GetMiscParm
FB_GetMiscReg
FB_GetPrivateProfileString
FB_GetSAA7146Reg
FB_GetSTVideoAdjustments
FB_GetSerialReg
FB_GetVGAMode
FB_GetVersionInfo
FB_GetVideoAdjustments
FB_GetVideoRect
FB_GetVideoSource
FB_GetVideoStandard
FB_GetVideoType
FB_GetXDelay
FB_GetYDelay
FB_Init
FB_LoadConfig
FB_LoadFile
FB_Locate
FB_MaskDraw
FB_MultiBoard
FB_OpenPrivateProfileString
FB_PCIConfig
FB_ReadSerialBytes
FB_SaveConfig
FB_SaveConfigToEEPROM
FB_SaveFile
FB_ScreenToDIB
FB_SetAcqRect
FB_SetColorSpace
FB_SetI2CReg
FB_SetInputOffset
FB_SetInputWindow
FB_SetIrisLevel
FB_SetMaskDelay
FB_SetMiscParm
FB_SetMiscReg
FB_SetPalette
FB_SetSAA7146Reg
FB_SetSerialReg
FB_SetVGAPixel
FB_SetVGARect
FB_SetVidFreq
FB_SetVideoAdjustments
FB_SetVideoConfig
FB_SetVideoMask
FB_SetVideoWindow
FB_SetXYDelay
FB_SetupSerial
FB_VGARectToMask
FB_VideoCaptureMem
FB_VideoGrab
FB_VideoLive
FB_VideoOffscreen
FB_WaitFieldType
FB_WaitHSync
FB_WaitMS
FB_WaitVSync
FB_WritePrivateProfileString
FB_WriteSerialBytes
HookFilterFunc
HookFilterFuncMulti
_AWTimeProc
_GetImgRow
_PutImgRow

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45b092ce287db00aa2672189e7516b43

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

user32

gdi32

winmm

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 196KB - Virtual size: 217KB

.rsrc Size: 4KB - Virtual size: 904B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 196KB - Virtual size: 217KB

.rsrc
Size: 4KB - Virtual size: 904B

.reloc
Size: 8KB - Virtual size: 7KB