36b5b6ab26006537ae311e72962be9ec_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

36b5b6ab26006537ae311e72962be9ec_JaffaCakes118
Size

260KB
MD5

36b5b6ab26006537ae311e72962be9ec
SHA1

010d504ac0a7b14560af0ca485254707d31a4c5e
SHA256

2f41c08716d17a75f72699a79351392d5fa74017f01cba5efcf0001d68cc7f21
SHA512

cbb92b581790e9b10ba2f147fd93da0aa1544920dc7062d1d4af7cb15f25e2ee4b5b27364f944dd9c17984ee8e8bbaae568c6a608db4819034038c15946b1d23
SSDEEP

6144:X7KrNyBzPn88uhKUD9UeRUKDN07ZMCbvqfOR7ZWd1:rKuzPn88uhKK9P6mCbqWBZW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b5b6ab26006537ae311e72962be9ec_JaffaCakes118

Files

36b5b6ab26006537ae311e72962be9ec_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e5382cd41ee9d5e4486884134d37352a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_ReplaceIcon

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreatePen
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
GetClipBox
GetObjectA
GetPixel
GetStockObject
LPtoDP
Polyline
SelectObject
SetWindowOrgEx
StretchBlt

kernel32

CloseHandle
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetTickCount
GetVersion
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
OpenProcess
RtlUnwind
SetHandleCount
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
lstrlenW

ole32

CoTaskMemFree

shell32

SHGetPathFromIDListA
SHGetDesktopFolder
SHGetMalloc

Exports

Exports

AudioCreateTargetItem
BurnAtOnce
D3D10MapResources
D3D9Begin
D3D9RegisterResource
Done
FlashMCCustomItemData
GetAtCaptureThumbnail
GetDllsVersion
GetErrorLog
GetImagePropBuffer
GetObjectInfo
GetParamValue
GetPersonalFunctionSetting
ReadAtCapDevParamFromRAW
RegisterTexture
ThreadExit
UnregisterDriveStatusCallback
WriteDevParamToRAW

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5382cd41ee9d5e4486884134d37352a

Headers

File Characteristics

Imports

comctl32

gdi32

kernel32

ole32

shell32

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 152KB

.data Size: 96KB - Virtual size: 128KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 152KB - Virtual size: 152KB

.data
Size: 96KB - Virtual size: 128KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB