2c27784a7f32663da220601501288128_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2c27784a7f32663da220601501288128_JaffaCakes118
Size

208KB
MD5

2c27784a7f32663da220601501288128
SHA1

334fcd01858a3fbc71418a2d761d9e6a4ffb1f0f
SHA256

3a6cdae604e7d0d07bd40a0112f3fccaf8c9e9cf79d9eb4f995ef4dd2ae1f7ae
SHA512

4ec1e795868a3fda45dcd6b4ae5db3e06083a736c252b577f2baef7610e7648f9a4af564b14a63c96220d7bd51410133acd6af29677919613363aa59edbe25fb
SSDEEP

3072:YniniqAGGhxQe5Hsdbgr2gRNWOY/sZvORg7dKAhs0dYSRor8zkNpIfn/K6M2oE:IiniB1uMr5NWOY/w5gCYSwZqf/joE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c27784a7f32663da220601501288128_JaffaCakes118

Files

2c27784a7f32663da220601501288128_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8fe24088bf83cdd252b13508c9d298e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LCMapStringW
LocalReAlloc
GetCurrentProcess
RaiseException
FindClose
SetHandleCount
LocalAlloc
GetStdHandle
Sleep
WaitForSingleObject
CreateEventW
GetModuleHandleA
lstrcpynW
DuplicateHandle
CreateThread
lstrcpyW
SetEndOfFile
LocalLock
GetModuleFileNameW
ResumeThread
GetACP
lstrlenA
lstrcmpW
SetStdHandle
UnhandledExceptionFilter
lstrcatW
FileTimeToLocalFileTime
GetStartupInfoA
GetProcAddress
GetEnvironmentVariableA
GetCurrentThread
GetTimeFormatW
GetTickCount
MultiByteToWideChar
LoadLibraryA
OutputDebugStringA
GetModuleHandleW
SetLastError
MulDiv
CompareStringW
GetLastError
GetLocalTime
InterlockedExchange
TerminateProcess
FormatMessageW
VirtualAlloc
LocalUnlock
GetFileSize
InitializeCriticalSectionAndSpinCount
FindFirstFileW
GetExitCodeProcess
HeapReAlloc
GetFileAttributesW
GetSystemInfo
GlobalFree
ExitProcess
lstrcmpiW
SystemTimeToFileTime
TlsSetValue
CreateDirectoryA
MapViewOfFile
GetEnvironmentStrings
GetCurrentThreadId
SetErrorMode
GetCurrentDirectoryW
DeleteFileW
GetSystemTimeAsFileTime
GetFileInformationByHandle
UnmapViewOfFile
SetUnhandledExceptionFilter
CloseHandle
LoadLibraryExW
GetUserDefaultUILanguage
QueryPerformanceCounter
LocalSize
GlobalAlloc
WriteConsoleA
VirtualProtect
TlsAlloc
CreateFileW
GetLocaleInfoA
GetDateFormatW
GetLocaleInfoW
CompareStringA
FreeEnvironmentStringsA
ReleaseMutex
WriteFile
GetOEMCP
GlobalUnlock
ReadFile
GetVersionExA
GetConsoleOutputCP
InitializeCriticalSection
FindFirstFileA
GetComputerNameW
WideCharToMultiByte
SetConsoleCtrlHandler
HeapFree
LocalFree
InterlockedCompareExchange
GetCommandLineW
LeaveCriticalSection
GlobalLock
CreateFileMappingW
FindResourceA
FoldStringW
DeleteCriticalSection
GetUserDefaultLCID
VirtualFree
GetSystemDefaultLCID
lstrlenW
GetCurrentProcessId
FreeLibrary

user32

GetWindowPlacement
GetMessagePos
SetScrollPos
GetCursorPos
SetWindowLongW
GetMessageW
GetWindowLongW
GetSystemMetrics
IntersectRect
GetKeyState
GetMenuState
CreatePopupMenu
LoadIconW
UnhookWinEvent
GetDesktopWindow
DrawTextExW
SendMessageW
SetFocus
TranslateMessage
GetClientRect
GetDC
GetSystemMenu
SetWindowTextW
ChildWindowFromPoint
DialogBoxParamW
EnableMenuItem
SetWindowLongA
GetWindowRect
UnionRect
GetWindowTextA
LoadStringW
IsIconic
SetWindowPlacement
CharLowerW
SetCursor
GetDlgItem
IsDialogMessageW
PeekMessageW
SetActiveWindow
GetSubMenu
CharNextW
SendDlgItemMessageW
DispatchMessageA
CheckMenuItem
DestroyWindow
InvalidateRect
MsgWaitForMultipleObjects
RegisterClassExW
DestroyIcon
GetMenu
GetKeyboardLayout
EndDialog
SetDlgItemTextW
GetDlgItemTextW
EnableWindow
RegisterWindowMessageW
CreateWindowExW
SetCapture
CharUpperW
CharUpperA
LoadImageW
DestroyMenu
GetFocus
OpenClipboard
ShowWindow
DefWindowProcA
WinHelpW
SetWinEventHook
PostMessageW
GetWindowTextW
GetParent
GetDlgCtrlID
SetTimer
CharNextA
DispatchMessageW
ReleaseDC
DeleteMenu
GetIconInfo
CreateDialogParamW
UpdateWindow
wsprintfW
MessageBeep
LoadAcceleratorsW
IsClipboardFormatAvailable
TranslateAcceleratorW
GetWindowThreadProcessId
MoveWindow
IsWindow
LoadCursorW
GetForegroundWindow
CloseClipboard
DefWindowProcW
PostQuitMessage
MessageBoxW
OffsetRect
ScreenToClient
DrawIconEx
SetWindowPos

gdi32

GetStockObject
SetBkMode
SetMapMode
GetObjectW
TextOutW
LPtoDP
AbortDoc
CreateDCW
EnumFontsW
StartPage
EndDoc
SelectObject
GetTextExtentPoint32W
SetWindowExtEx
EndPage
DeleteDC
CreateFontIndirectW
StartDocW
GetTextMetricsW
DeleteObject
SetAbortProc
GetTextFaceW
GetDeviceCaps
SetViewportExtEx

comdlg32

ReplaceTextW
PrintDlgExW
PageSetupDlgW
GetOpenFileNameW
FindTextW
GetFileTitleW
GetSaveFileNameW
CommDlgExtendedError
ChooseFontW

shell32

DragQueryFileW
DragFinish
DragAcceptFiles
ShellAboutW

msvcrt

_vsnprintf
realloc
_controlfp
_acmdln
__p__commode
_c_exit
fclose
__setusermatherr
_wtol
memmove
_initterm
_XcptFilter
_snwprintf
memset
__p__fmode
wcsstr
__set_app_type
wcsncmp
iswctype
_cexit
localtime
exit
__dllonexit
time
__getmainargs
_amsg_exit
_exit
_wcsicmp
wcsncpy
_adjust_fdiv

advapi32

RegCreateKeyW
RegQueryValueExA
RegSetValueExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
IsTextUnicode

comctl32

CreateStatusWindowW

winspool.drv

GetPrinterDriverW
OpenPrinterW
ClosePrinter

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fe24088bf83cdd252b13508c9d298e5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

msvcrt

advapi32

comctl32

winspool.drv

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 98KB - Virtual size: 98KB

.data Size: 18KB - Virtual size: 21KB

.reloc Size: 512B - Virtual size: 266B

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 98KB - Virtual size: 98KB

.data
Size: 18KB - Virtual size: 21KB

.reloc
Size: 512B - Virtual size: 266B

.rsrc
Size: 2KB - Virtual size: 1KB