3a8b36dd0c7ca4a933971ffb12ab7628_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3a8b36dd0c7ca4a933971ffb12ab7628_JaffaCakes118
Size

100KB
MD5

3a8b36dd0c7ca4a933971ffb12ab7628
SHA1

fa481122e79eb7b6809e1e3c2523b12a56ba5b11
SHA256

d2634418f0eba8eed71efb9b7c18e10e1b5aaa37e9db38145a2302cb1d150c9b
SHA512

d0dbb1ef000abc7dd7fc29e72aadcafbfe31e33ee5feb73aafa4f4a6f50840a09c8fe3ff7580f6cd355c1d54c116bf687e7b1559bfeacf0491237e28b1e17581
SSDEEP

3072:xauBEHahO+xRqOvNcW8Y1wvbQyQOtzGpzH:NYa1xVv+Y1wGOtzCz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8b36dd0c7ca4a933971ffb12ab7628_JaffaCakes118

Files

3a8b36dd0c7ca4a933971ffb12ab7628_JaffaCakes118
.dll windows:5 windows x86 arch:x86

6755824bd212e40656faa5a28c933cc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
CompareStringW
TlsGetValue
CreateEventW
TlsAlloc
TlsSetValue
ResetEvent
InterlockedIncrement
InterlockedDecrement
MulDiv
LoadLibraryW
GetProcAddress
FreeLibrary
MultiByteToWideChar
GetPrivateProfileIntA
WritePrivateProfileStringA
GetModuleFileNameA
GlobalAlloc
GlobalFree
WideCharToMultiByte
lstrcmpiW
lstrcpynW
GetModuleHandleW
lstrcpynA
SetErrorMode
SetEvent
DeviceIoControl
GetLastError
GetLogicalDrives
GetDriveTypeW
OutputDebugStringA
OutputDebugStringW
GlobalMemoryStatus
GetLogicalDriveStringsW
GetVersionExW
ResumeThread
LoadLibraryA
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
InterlockedExchange
LocalFree
LocalAlloc
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
CloseHandle
Sleep
WaitForSingleObject
SetThreadPriority
CreateThread
CreateFileW
GetTickCount

user32

DispatchMessageW
EndDialog
SetDlgItemInt
GetWindowTextW
CharLowerW
wsprintfW
GetCursorPos
PtInRect
SendDlgItemMessageW
ReleaseDC
GetDC
GetSysColor
LoadImageW
InvalidateRect
PostMessageW
SetActiveWindow
WaitMessage
IsDialogMessageW
AttachThreadInput
MessageBeep
FlashWindowEx
GetForegroundWindow
GetWindowLongW
GetWindow
IsWindowEnabled
GetDialogBaseUnits
MapDialogRect
SetCursor
EnableWindow
GetDlgItem
CharPrevA
KillTimer
SetForegroundWindow
UpdateWindow
DestroyWindow
SetWindowTextW
ShowWindow
DefWindowProcW
SetPropW
SetWindowLongW
ShowWindowAsync
RemovePropW
CallWindowProcA
CallWindowProcW
GetPropW
UnhookWindowsHookEx
SetWindowsHookExW
PostQuitMessage
CallMsgFilterW
MsgWaitForMultipleObjectsEx
PostThreadMessageW
GetWindowThreadProcessId
CallNextHookEx
SetWindowPos
IsWindowVisible
FindWindowExW
GetClassNameW
EnumWindows
CharNextExA
wsprintfA
CheckDlgButton
IsDlgButtonChecked
MessageBoxA
SetTimer
FillRect
MapWindowPoints
GetWindowRect
GetClientRect
GetParent
GetMonitorInfoW
MonitorFromRect
SetRect
OffsetRect
SendMessageW
GetDesktopWindow
IsWindow
TranslateMessage
IsWindowUnicode
PeekMessageW
SetDlgItemTextW
MessageBoxIndirectW
LoadCursorW

gdi32

CreateCompatibleDC
ExcludeClipRect
RectVisible
DeleteObject
CreateFontIndirectW
GetDeviceCaps
GetObjectW
GetStockObject
DeleteDC
BitBlt
SelectObject

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
SysFreeString

msvcr90

_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_CxxThrowException
??_V@YAXPAX@Z
strcmp
strncpy
strstr
abs
??_U@YAPAXI@Z
strncat
isdigit
_purecall
toupper
_wcsdup
_wcsicmp
_wcsnicmp
_itow
atoi
_strnicmp
_stricmp
??2@YAPAXI@Z
_vsnprintf
strlen
strcpy
memmove
memcmp
_wtoi
wcscmp
_vsnwprintf
free
malloc
??3@YAXPAX@Z
memcpy
memset
_initterm
_except_handler3
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
__CxxFrameHandler3
_encoded_null

shlwapi

PathAppendA
PathRemoveFileSpecA
PathAppendW
PathCombineW
PathFindFileNameW
PathFindExtensionW
PathCombineA

Exports

Exports

winampAddUnifiedFileInfoPane
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_lasterror
winampGetExtendedRead_open
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6755824bd212e40656faa5a28c933cc4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

msvcr90

shlwapi

Exports

Exports

Sections

.text Size: 70KB - Virtual size: 69KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 1024B - Virtual size: 66KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 70KB - Virtual size: 69KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 1024B - Virtual size: 66KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 6KB - Virtual size: 6KB