2ec5f8bc698fc9a1486f836a2b1e7a4f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2ec5f8bc698fc9a1486f836a2b1e7a4f_JaffaCakes118
Size

244KB
MD5

2ec5f8bc698fc9a1486f836a2b1e7a4f
SHA1

54e92e12dfd23b5410e5f2a37ebee6235745bf10
SHA256

3e178791319797efa68f6f8d20c172250938388227a8b07ff9bf6474fd194a36
SHA512

f9bb91eab69cb0324b8ff2064b825cae0837829a48a0d3d8830a3738e83ac6e4c5b138717116331dc31db5cccaecada87b4653c8b7a6c3adb0464d8e8392a7f2
SSDEEP

6144:mVN8GSmF1+r6egSbWDHGcrTf3+5Ih/sK:oy2v+rjbWDHTrTf3+5Ij

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ec5f8bc698fc9a1486f836a2b1e7a4f_JaffaCakes118

Files

2ec5f8bc698fc9a1486f836a2b1e7a4f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

13471c90a5fdbbf0e423196f7bfd1147

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

TranslateMessage
SetWindowPos
SetTimer
SetForegroundWindow
SetDlgItemTextW
SendMessageW
SendDlgItemMessageW
RegisterClassW
PostQuitMessage
PostMessageW
MessageBoxW
LoadStringW
LoadImageW
LoadIconW
KillTimer
IsDlgButtonChecked
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetParent
GetMessageW
GetDlgItem
GetDesktopWindow
GetClientRect
EndDialog
DispatchMessageW
DialogBoxParamW
DefWindowProcW
CreateWindowExW
CheckDlgButton

comctl32

ord17

advapi32

RegQueryValueExW
RegOpenKeyExW
RegNotifyChangeKeyValue
RegCloseKey
GetSecurityInfo
GetAce
SetSecurityInfo

shell32

Shell_NotifyIconW

kernel32

VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetThreadPriority
SetStdHandle
SetProcessShutdownParameters
SetLastError
VirtualProtect
SetFilePointer
SetEvent
RtlUnwind
ResumeThread
QueryPerformanceCounter
OpenEventW
MultiByteToWideChar
LocalReAlloc
LocalFree
LocalAlloc
WaitForMultipleObjects
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiW
lstrcpyW
lstrlenW
SetHandleCount
GetCurrentProcess
LoadLibraryA
LeaveCriticalSection
CloseHandle
CompareStringW
CreateEventW
CreateThread
EnterCriticalSection
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
LCMapStringA
LCMapStringW

Exports

Exports

AddDataToImageItem
BindTexture2D
CopyClickWBCoefs
CreateFolder
EnumDeviceReset
EnumRelCamSettingReset
GetAFDistanceSettingCount
GetDevice
GetDiscErasingTime
GetExposureComp
MallocPitch
RegisterFatBinary
UnbindTexture
WGLGetDevice

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13471c90a5fdbbf0e423196f7bfd1147

Headers

File Characteristics

Imports

user32

comctl32

advapi32

shell32

kernel32

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 136KB

.data Size: 96KB - Virtual size: 144KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 136KB - Virtual size: 136KB

.data
Size: 96KB - Virtual size: 144KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB