15c434b8c7a880186363bec766bc7747_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

15c434b8c7a880186363bec766bc7747_JaffaCakes118
Size

56KB
MD5

15c434b8c7a880186363bec766bc7747
SHA1

0dda6f0db1d28a03d806a4a60a5a46802cdbaf58
SHA256

3e14428dff87cfe35949dfe6060698dda11dc332784a6dd0ea8e8231c92a3b6a
SHA512

6314dad3d3933f138598ada5707146b41bf01c35ec9ea5c80aea61c56ac74c3b9e51e0c7594ac3a55afff702505c8b4d07dbd20ac4cbe652b9f2d51607646f31
SSDEEP

1536:G5Rx30jJwXZYbEmtl7AZCEBCMKou4uMNEJnl:G5/3ikYbzvsvB5+4sJnl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15c434b8c7a880186363bec766bc7747_JaffaCakes118

Files

15c434b8c7a880186363bec766bc7747_JaffaCakes118
.dll windows:5 windows x86 arch:x86

0498340fb8f02d28bd11e1e5642e8ca0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

GetObjectA
CreateSolidBrush

user32

SetForegroundWindow
FillRect
CallNextHookEx
GetDlgCtrlID
CharUpperW
GetMonitorInfoW
ScreenToClient
GetParent
UnregisterClassA
CreateWindowExW
PtInRect
GetSysColorBrush
TranslateMessage
OpenClipboard
CloseClipboard
TrackPopupMenuEx
LoadIconW
SetTimer
GetWindowPlacement
PeekMessageW
GetDesktopWindow
LoadStringW
DispatchMessageW
GetKeyState
SetFocus
IsWindowVisible

kernel32

HeapSetInformation
GetVersionExW
DeleteFileW
ReadDirectoryChangesW
GetDateFormatW
FormatMessageW
HeapAlloc
FindNextFileW
InterlockedExchangeAdd
GetUserDefaultUILanguage
CloseHandle
UnhandledExceptionFilter
VirtualAlloc
GetCurrentProcess
GetProcessHeap
CreateEventW
WaitForSingleObject

msvcrt

_errno
_acmdln
_stricmp
memcpy

ntdll

NtOpenEventPair
NtPowerInformation
NtQueryMutant
NtQueryInformationFile
NtReleaseSemaphore
NtOpenJobObject
NtQueryDirectoryObject
NtCreateTimer
NtOpenEvent

kbdianui

_LRteps
_LSinh
_LInf
_Toupper
_LNan
_LDenorm
_Dnorm
_Dtest
_Exp
_FDenorm
_LCosh
_Eps

Exports

Exports

OpenINFEngine
ExtractFiles
DbgPrintEx
CreateProcessNotify
EmClientRuleRegisterNotification
PathCleanupSpec
TracePrintfA
EmpProviderRegister
AllocADsStr
ShimDumpCache
EmProviderDeregisterEntry
PathIsSlowA
ApphelpCheckExe
EmClientQueryRuleState
TraceGetConsoleA
TracePrintfExA
DbgkLkmdRegisterCallback
GetVersionFromFile
DoInfInstall
TraceVprintfExA
EmProviderRegisterEntry
SetPerUserSecValues
DbgSetDebugFilterState
DwEnumEntryDetails
DelNodeRunDLL32
TraceDeregisterW
EtwWriteEx
PathResolve
TracePutsExA
EmProviderRegister
PathMakeUniqueName
TraceGetConsoleW
RegisterOCX
NeedRebootInit
TraceDumpExA
DwRasRefreshKerbScCreds
EtwWriteStartScenario
PathQualify
PathIsExe
EtwActivityIdControl
TraceVprintfExW
EtwWriteTransfer
RegRestoreAll
SetPermLayers
EtwRegister
TraceDeregisterA
EtwProviderEnabled
FileSaveMarkNotExist
DbgCommandString
LaunchINFSectionEx
EmClientRuleEvaluate
TranslateInfStringEx
LaunchINFSection
TraceDeregisterExW
EtwRegisterClassicProvider
BerBvFree
RebootCheckOnInstall
TracePutsExW
TraceRegisterExA
GetVersionFromFileEx
DbgQueryDebugFilterState
EtwWrite
RunSetupCommand
RegSaveRestore
AllowPermLayer
EtwUnregister
EmProviderDeregister
EtwEventEnabled
TraceRegisterExW
RegInstall
TraceDeregisterExA
UserUnInstStubWrapper
AllocADsMem
DwDeleteSubEntry
TranslateInfString
PathIsSlowW
ExecuteCab
EtwWriteString
DbgPrintReturnControlC
EtwSendTraceBuffer
PathGetShortPath
ShimFlushCache

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0498340fb8f02d28bd11e1e5642e8ca0

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

msvcrt

ntdll

kbdianui

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 34KB - Virtual size: 33KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 8KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 34KB - Virtual size: 33KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 8KB