1c899233bb580ea68717d0d4743d59ae_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1c899233bb580ea68717d0d4743d59ae_JaffaCakes118
Size

59KB
MD5

1c899233bb580ea68717d0d4743d59ae
SHA1

bc8e81af687f91d9972447e7aabbb19012452083
SHA256

2f335da94861a7bde94044aa3fcf1cb5d5eed6cdcfb9775f89d099ceb43d31bf
SHA512

a4b70950b348bf51f918338f395556b93fb1377efe4961622f5e774056cb9c1b4db185cdd1021243c5ba989f7d7cc569839fa0cb6753945562449f7863d8ba19
SSDEEP

1536:P5RnVR8Ax0MtYSUXODL2ih4T8zj6719ja43g:PXnb+MeqLh4eE993g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c899233bb580ea68717d0d4743d59ae_JaffaCakes118

Files

1c899233bb580ea68717d0d4743d59ae_JaffaCakes118
.dll windows:5 windows x86 arch:x86

bae746c67ba808546241f917e4e9b6ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

CreateRectRgnIndirect
CreateRectRgn
SetEnhMetaFileBits
GetBitmapBits
GetStockObject
CreateDIBitmap
StretchDIBits
SetAbortProc
CopyEnhMetaFileA
EndPage
GetCurrentObject
GetTextAlign
SelectPalette
SetROP2
RestoreDC
IntersectClipRect

filedsl1

_LSinh
_Getcoll
_FSnan
_FCosh
_LCosh
_Cosh
_Toupper
_Strxfrm
_LInf

user32

BeginDeferWindowPos
GetCursorPos
ShowScrollBar
TrackPopupMenu
CopyImage
DrawCaption
PostMessageW
RegisterClassA
SendDlgItemMessageA
GetDlgItem
MsgWaitForMultipleObjects
IsDialogMessageA
GetParent
InflateRect
GetClientRect
DrawTextW
FillRect
DefFrameProcA
GetComboBoxInfo
DestroyWindow
DrawTextA
CharUpperBuffA
DestroyCursor
DrawIconEx
KillTimer
ScrollDC
SendMessageW
GetMessagePos
GetClassInfoA
GetWindowRect
CallNextHookEx
SetClipboardData
UnhookWindowsHookEx
CheckMenuItem
TranslateMDISysAccel
GetScrollPos
SetWindowPlacement
LoadStringW
SetScrollRange
CharUpperW
IsWindowVisible

kernel32

CloseHandle
GlobalUnlock
MapViewOfFileEx
CreateEventA
GetCurrentProcess
ResumeThread
ExitThread
TerminateProcess
CreateThread
GlobalHandle
VirtualQuery
GetTickCount
WaitForMultipleObjects
LeaveCriticalSection
GetACP
GetModuleFileNameW
GetModuleHandleA
SetLastError
UnmapViewOfFile
GetComputerNameW
SizeofResource
lstrcpynA
ExitProcess
SuspendThread
CreateFileMappingA
GetCurrentThread
GetComputerNameA
lstrlenW
VirtualQuery

shell32

DragQueryPoint
ShellExecuteExA
DragQueryFileA
DragFinish

comctl32

ImageList_Write
ImageList_SetIconSize
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_Replace

ole32

CoInitialize
OleSetMenuDescriptor
StringFromGUID2
CoDisconnectObject
RevokeDragDrop

winmm

PlaySoundA

advapi32

RegDeleteValueA

oleaut32

SafeArrayPtrOfIndex
SafeArrayDestroy
SafeArrayPutElement
SafeArrayGetUBound
GetErrorInfo

urlmon

CoInternetCreateSecurityManager

wininet

HttpQueryInfoA
InternetCombineUrlA
InternetWriteFile

comdlg32

FindTextA
GetOpenFileNameA

imm32

ImmGetVirtualKey

Exports

Exports

CreateProcessNotify
BerBvFree
AdsTypeToLdapTypeCopyGeneralizedTime
ChangeSeparator
DllClientCleanup
ApphelpUpdateCacheEntry
krnlsdtc
DllClientStartup
BuildADsParentPath
FreeADsStr
ConvertU2TrusteeToSid
AllocADsStr
GetLDAPTypeName
GetDomainDNSNameForDomain

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bae746c67ba808546241f917e4e9b6ca

Headers

File Characteristics

Imports

gdi32

filedsl1

user32

kernel32

shell32

comctl32

ole32

winmm

advapi32

oleaut32

urlmon

wininet

comdlg32

imm32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB