1992ed3c6e064504ace050984d9f3ed3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1992ed3c6e064504ace050984d9f3ed3_JaffaCakes118
Size

248KB
MD5

1992ed3c6e064504ace050984d9f3ed3
SHA1

0686dac3d4f3c485ddac9bb05d1b5dc8314c8cbb
SHA256

77c0daeb759f9e1b7d510b2321610d59f82c7d302c50b193ea3f57af4ff6adb4
SHA512

64d627047aec58d4aaf3e15a5031252c59bfa54ec5851508bb71eb2e3b6ba1cd2fb6fc198f3a136551f8d9214f8a030eef6ac51df9c932ca42313f98297badfb
SSDEEP

6144:/EYwP0SQcXYvBjAVt+qTsmg3tKQS9tpdx2aKcl1zye6VKDWhEk:81YXAvhskQgbFKcHV6gMEk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1992ed3c6e064504ace050984d9f3ed3_JaffaCakes118

Files

1992ed3c6e064504ace050984d9f3ed3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c314f4ebdbf35b4cb592f75de1f56f38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHExtractIconsW
SHBindToParent
DragAcceptFiles
SHLoadNonloadedIconOverlayIdentifiers

user32

AnyPopup
AttachThreadInput
CallWindowProcA
CharNextA
CreateAcceleratorTableA
CreateWindowExA
DefWindowProcA
DestroyAcceleratorTable
DestroyWindow
DialogBoxIndirectParamA
EnableWindow
EndDialog
EndPaint
FillRect
FlashWindowEx
GetActiveWindow
GetClassInfoExA
GetClassNameA
GetClientRect
GetClipboardOwner
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetParent
GetSysColor
wsprintfA
WindowFromPoint
UpdateWindow
UnregisterClassA
TrackPopupMenu
SetWindowTextA
SetWindowPos
SetWindowLongA
SetWindowContextHelpId
SetFocus
SetCursor
SetCapture
SendMessageA
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClassExA
RedrawWindow
PtInRect
MessageBoxA
LockWorkStation
LoadCursorA
IsWindow
IsRectEmpty
IsChild
InvalidateRgn
InvalidateRect
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindow
GetSystemMenu

gdi32

SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetGraphicsMode
SetBkMode
SelectObject
RestoreDC
ModifyWorldTransform
GetStockObject
GetObjectA
GetDeviceCaps
GetBoundsRect
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap

comctl32

ord17

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA

kernel32

FindResourceA
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FlushInstructionCache
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
lstrlenW
lstrlenA
lstrcpynA
lstrcmpiA
lstrcmpA
WideCharToMultiByte
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SetLastError
RaiseException
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
IsProcessorFeaturePresent
IsDBCSLeadByte
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetVersionExA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetCurrentThreadId

oleaut32

LoadTypeLi
OleCreateFontIndirect
SysAllocString
SysAllocStringLen
SysFreeString
SysStringByteLen
VariantInit
SysStringLen
VarNot
VariantClear
LoadRegTypeLi

ddraw

DSoundHelp
DirectDrawCreateClipper
GetSurfaceFromDC
DDGetAttachedSurfaceLcl

Exports

Exports

CreateEffectCompilerFromResourceA
CreateNPatchMesh
CreateSkinInfo
CreateVolumeTextureFromFileW
GetJ2KOptions
OptimizeVertices
QuaternionRotationMatrix
SHProjectCubeMap
SaveFileMemory
SetLoadInfoCallback
SetWMFResolution
Vec4Transform
VecGetFontMapperLinkList
mpegInGetNextSample
mpegInSaveIdxW

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c314f4ebdbf35b4cb592f75de1f56f38

Headers

File Characteristics

Imports

shell32

user32

gdi32

comctl32

advapi32

kernel32

oleaut32

ddraw

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 117KB - Virtual size: 116KB

.data Size: 43KB - Virtual size: 43KB

.rsrc Size: 36KB - Virtual size: 36KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 117KB - Virtual size: 116KB

.data
Size: 43KB - Virtual size: 43KB

.rsrc
Size: 36KB - Virtual size: 36KB

.reloc
Size: 2KB - Virtual size: 2KB