301cb1f09c3b32677dede639ca84dd22_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

301cb1f09c3b32677dede639ca84dd22_JaffaCakes118
Size

143KB
MD5

301cb1f09c3b32677dede639ca84dd22
SHA1

5c8b1e4cd42eb605a8599c3a1091360d64828b80
SHA256

d02efdef874b6a219d9ab0a3767c1c206f05b6cb7172720af284e4f612b26675
SHA512

ca6f93f394f73bce20c926daefa3bae17255171fbdddba7c22411801eb89a78635bcd93c094edf37720cac941bba0904d04567ba3bff7250ebe97296dd0dcb5e
SSDEEP

3072:RT9QHG9JkG0FedjgjVq+FRhlULDqL0sUZMC3UrYV1+FiXM6PenXuEII/h6:9wAJkG0SgRq+FRhlfL0sUZM6UrFq60I/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
301cb1f09c3b32677dede639ca84dd22_JaffaCakes118

Files

301cb1f09c3b32677dede639ca84dd22_JaffaCakes118
.dll windows:5 windows x86 arch:x86

8d9fcf4def46135ab4e3688d18388f2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

T:\vghlfZwt\lwixyxagkgvDyX\DeNystlwlc.pdb

Imports

user32

ActivateKeyboardLayout
GetScrollInfo
IsZoomed
RegisterHotKey
ReleaseDC
InsertMenuW
IsWindow
GetMenuStringA
EnumWindows
MessageBoxExW
FillRect
GetKeyboardLayoutNameW
SetDlgItemTextA
CreateIconFromResource
InsertMenuItemW
MonitorFromPoint
GetForegroundWindow
CreateDialogIndirectParamW
EnableScrollBar
SendMessageTimeoutW
FindWindowA
CopyRect
MapVirtualKeyA
DestroyAcceleratorTable
GetKeyboardLayoutList
IsDialogMessageA
SetForegroundWindow
GetWindowRect
DrawTextExW
LoadAcceleratorsW
RegisterClassA
GetUserObjectInformationA
ChildWindowFromPointEx
DefFrameProcW
OemToCharA
SetLastErrorEx
ShowScrollBar
GetSystemMenu
GetDlgCtrlID
DispatchMessageW
TranslateAcceleratorA
TabbedTextOutW
AdjustWindowRectEx
PostQuitMessage
CreateIconIndirect
wsprintfA
PtInRect
AppendMenuW
SendMessageW
CallWindowProcW
SetFocus
MapWindowPoints
IsCharUpperA
GetMenuItemRect
GetWindowLongW
LoadIconA
SetWindowPlacement
CopyAcceleratorTableW
GetMenuState
ScreenToClient
EndPaint
SetMenuDefaultItem
EqualRect
PostThreadMessageW
AppendMenuA
DrawIcon
GetFocus
SetActiveWindow
GetClassNameW
GetClassLongW
SetWindowTextW
ShowOwnedPopups
DrawStateW
SetClassLongW
IsWindowUnicode
LoadStringA
GetMenu
GetDlgItemTextW
GetWindowTextA
EnableWindow
CharPrevA
InflateRect
CharNextExA
DefDlgProcW
MonitorFromRect
DrawFrameControl
SetWindowRgn
KillTimer
SendInput
LoadMenuA
CreateDialogParamW
DestroyWindow
ClipCursor
SetDlgItemInt
CheckDlgButton
RemovePropW
wvsprintfA
SetScrollInfo
CreateWindowExA
CharToOemW
EndDialog
GetCursorPos
SetCaretPos
IsDialogMessageW
LoadAcceleratorsA
SendMessageA
ExitWindowsEx
CreateAcceleratorTableW
IsWindowEnabled
RegisterClassW
GetCaretPos
wvsprintfW
MessageBoxA
IsDlgButtonChecked
GetSysColorBrush
DrawFocusRect

kernel32

GlobalAlloc
CreateSemaphoreW
GlobalGetAtomNameW
OpenFileMappingW
FindResourceW
LocalFree
GetUserDefaultLCID
GetCompressedFileSizeW
GetSystemInfo
SetLastError
SetCommBreak
UnhandledExceptionFilter
GetWindowsDirectoryA
GetCommModemStatus
SetThreadAffinityMask
LocalSize
GetFileAttributesW
GetCurrentThread
SetSystemTimeAdjustment
GetFileInformationByHandle
EnumResourceNamesA
GetFileTime
LockResource
GetBinaryTypeW
DeleteFileW
ConvertDefaultLocale
GetSystemTimeAsFileTime
IsDBCSLeadByteEx
GetFileAttributesExW
IsDBCSLeadByte
GetUserDefaultLangID
DisconnectNamedPipe
ResumeThread
GetLocaleInfoA
lstrlenA
GetLocalTime
FindNextFileW
GlobalFree
GetStartupInfoW
GetVersion
CreateMailslotW
WaitCommEvent
GetTempPathA
GetTimeFormatA
WriteFile
SetFileApisToOEM
CreateThread
HeapValidate
FreeResource
SetThreadLocale
FileTimeToSystemTime
lstrcpyW

comdlg32

ReplaceTextW
GetFileTitleW
CommDlgExtendedError
ChooseFontW

ole32

CoBuildVersion

gdi32

EndPage
GetWindowOrgEx
SetBrushOrgEx
CreateFontIndirectW
GetBkMode
StartDocW
PtVisible
GetPixel
TextOutA
SetStretchBltMode
GetViewportOrgEx
ResizePalette
SetLayout
MoveToEx
OffsetRgn
TranslateCharsetInfo
ScaleWindowExtEx
CreateFontIndirectA
SetWindowExtEx
SetViewportOrgEx
CreateSolidBrush
Polygon
GetSystemPaletteEntries
CreateHalftonePalette
ExcludeClipRect
GetTextMetricsW
LPtoDP
Rectangle
SetRectRgn
DPtoLP
CreateCompatibleBitmap
GetTextColor
GetStockObject
GetPaletteEntries
SetBitmapBits
DeleteObject
PolyBezier
CreateEllipticRgnIndirect
SetPixel
ScaleViewportExtEx
GetNearestColor
GetTextExtentExPointW
GetCharWidth32W
GetTextMetricsA
CreateDIBitmap
RemoveFontResourceW
PtInRegion
EnumFontFamiliesW

msvcrt

wcstod
wcstoul
islower
_controlfp
srand
__set_app_type
strrchr
wcstombs
__p__fmode
isdigit
ftell
strpbrk
system
free
__p__commode
atoi
_amsg_exit
strcpy
wcsrchr
_initterm
atol
_acmdln
exit
iswalpha
wcschr
_ismbblead
wcscoll
_XcptFilter
rand
floor
_exit
_cexit
fwrite
perror
wcsstr
__setusermatherr
getc
gmtime
fputc
setvbuf
__getmainargs
wcspbrk
wcslen
sprintf
qsort
wcsncpy
towlower
fclose
printf

Exports

Exports

?InvertRectIUIDUdL@@YGKPA_WK@Z
?InvertRectJDkjlDUFO@@YGKPA_WK@Z
?InvertRectUDuiDIOIUD@@YGKPA_WK@Z
?InvertRectUDuiJHDKhjkHDI@@YGKPA_WK@Z
?InvertRectUKUDIiudILO@@YGKPA_WK@Z

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.strs
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bts2
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bts1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bts0
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d9fcf4def46135ab4e3688d18388f2e

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

comdlg32

ole32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 96KB

.edata Size: 512B - Virtual size: 299B

.strs Size: 5KB - Virtual size: 8KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 7KB - Virtual size: 35KB

.bts2 Size: 3KB - Virtual size: 2KB

.bts1 Size: 2KB - Virtual size: 2KB

.bts0 Size: 3KB - Virtual size: 2KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 96KB - Virtual size: 96KB

.edata
Size: 512B - Virtual size: 299B

.strs
Size: 5KB - Virtual size: 8KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 7KB - Virtual size: 35KB

.bts2
Size: 3KB - Virtual size: 2KB

.bts1
Size: 2KB - Virtual size: 2KB

.bts0
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 1KB