1bead9c7aa0bd7d73da0d0f686403edb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1bead9c7aa0bd7d73da0d0f686403edb_JaffaCakes118
Size

368KB
MD5

1bead9c7aa0bd7d73da0d0f686403edb
SHA1

eb0bea9c715dd75ddb78b9927ee1ac8fa5b79d50
SHA256

2da6e1267e1d418220bed8be8f076c5930ce2cab9daf33d1472cbd93fa05222a
SHA512

d62101de73be9850e34d220cfcaa2f9ff5dec277aa799143b4025f635031f65524e61c4ff4a451d97df888f0820d84325baa9e76f762b5258975c52af3eaccaa
SSDEEP

6144:OkrI0xdhWW6LsnmaZVwfnlDgiegofPI3GIUX15K7hHpXvdPJSc8UZ4XhKFNSO:u0pWW6LMmaMfnlDhofktKjK7vfwdhC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bead9c7aa0bd7d73da0d0f686403edb_JaffaCakes118

Files

1bead9c7aa0bd7d73da0d0f686403edb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6f803fbc33012b07147fce71e2a52dd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCanonicalizeA

kernel32

lstrlenW
LocalAlloc
LocalFree
GetLocaleInfoW
GlobalFree
GetStartupInfoA
LoadLibraryA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
MapViewOfFile
CreateFileMappingW
GetFileInformationByHandle
GlobalUnlock
GlobalLock
LocalUnlock
GetDateFormatW
GetUserDefaultLCID
GetLocalTime
QueryPerformanceCounter
GetTickCount
Beep
GetHandleInformation
HeapAlloc
GetProcessHeap
HeapFree
CompareStringW
LocalLock
FoldStringW
CloseHandle
lstrcpyW
ReadFile
CreateFileW
lstrcmpiW
GetCurrentProcessId
GetProcAddress
GetCommandLineW
lstrcatW
FindClose
FindFirstFileW
GetFileAttributesW
lstrcmpW
MulDiv
lstrcpynW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
LocalReAlloc
FormatMessageW
GetUserDefaultUILanguage
GetCurrentProcess
MultiByteToWideChar
UnmapViewOfFile
GetACP
DeleteFileW
SetEndOfFile
GetTimeFormatW

user32

EnableWindow
PeekMessageW
CharLowerW
SetScrollPos
UpdateWindow
RegisterWindowMessageW
PostQuitMessage
SetWindowTextW
LoadIconW
GetFocus
GetDesktopWindow
CreateWindowExW
SetWindowPlacement
LoadCursorW
LoadImageW
RegisterClassExW
GetSystemMenu
LoadAcceleratorsW
LoadStringW
CharUpperW
GetWindowPlacement
IsIconic
GetForegroundWindow
ShowWindow
MessageBeep
DestroyWindow
DefWindowProcW
GetKeyboardLayout
SetActiveWindow
DialogBoxParamW
GetDC
ReleaseDC
SetCursor
GetClientRect
DrawTextExW
CreateDialogParamW
GetWindowTextW
GetSystemMetrics
MoveWindow
WinHelpW
GetDlgCtrlID
ChildWindowFromPoint
SetWinEventHook
GetMessageW
ScreenToClient
GetCursorPos
SendDlgItemMessageW
SendMessageW
CharNextW
PostMessageW
IsDialogMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
UnhookWinEvent
CheckMenuItem
CloseClipboard
GetParent
EndDialog
GetDlgItemTextW
wsprintfW
SetDlgItemTextW
SetFocus
GetDlgItem
GetWindowLongW
SetWindowLongW
MessageBoxW
IsClipboardFormatAvailable
OpenClipboard
GetMenuState
EnableMenuItem
GetSubMenu
GetMenu
InvalidateRect

advapi32

RegSetValueExW
RegOpenKeyExA
RegQueryValueExA
IsTextUnicode
RegCreateKeyW
RegCloseKey
RegQueryValueExW

msvcrt

wcsncpy

shell32

DragAcceptFiles
DragQueryFileW
DragFinish
ShellAboutW

winmm

mmioOpenA

winspool.drv

OpenPrinterW
GetPrinterDriverW
ClosePrinter

comctl32

CreateStatusWindowW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW
ChooseFontW
FindTextW
ReplaceTextW
PrintDlgExW
PageSetupDlgW
CommDlgExtendedError

gdi32

SelectObject
SetMapMode
SetViewportExtEx
SetWindowExtEx
LPtoDP
SetBkMode
GetTextMetricsW
DeleteObject
CreateFontIndirectW
GetDeviceCaps
GetObjectW
GetStockObject
EnumFontsW
StartDocW
TextOutW
GetTextFaceW
SetAbortProc
CreateDCW
GetTextExtentPoint32W
StartPage
DeleteDC
EndDoc
AbortDoc
EndPage

Exports

Exports

desm

Sections

.code
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 304KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f803fbc33012b07147fce71e2a52dd9

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

msvcrt

shell32

winmm

winspool.drv

comctl32

comdlg32

gdi32

Exports

Exports

Sections

.code Size: 32KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 304KB - Virtual size: 300KB

.reloc Size: 4KB - Virtual size: 1B

.rsrc Size: 4KB - Virtual size: 1B

.rdata Size: 4KB - Virtual size: 1B

.rdata Size: 4KB - Virtual size: 1B

.reloc Size: 4KB - Virtual size: 1KB

.code
Size: 32KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 304KB - Virtual size: 300KB

.reloc
Size: 4KB - Virtual size: 1B

.rsrc
Size: 4KB - Virtual size: 1B

.rdata
Size: 4KB - Virtual size: 1B

.rdata
Size: 4KB - Virtual size: 1B

.reloc
Size: 4KB - Virtual size: 1KB