3b546d319fa627942be0e5a5b8173986_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b546d319fa627942be0e5a5b8173986_JaffaCakes118
Size

407KB
MD5

3b546d319fa627942be0e5a5b8173986
SHA1

5babfe3af813c2fa4f1d6f7c8254d2fa2f4b1feb
SHA256

c0626196f81793261c1f61631360437f310ee2ff6373bb482dc4c122d149437e
SHA512

ba8b3f7834b46a5ef905b3eda4ea700f228cd041bfe2538e51f5f02a055e1a589af0ac85e109cc4648c801e0eea3c8d74a9077fed32bdd0699b7e1095193162e
SSDEEP

6144:1IoGdhKd54t7lheQ88cd9PuPARLs7dJh2FAUTaX/AmNM8uXup74KxEWtEKR6qY7:10+5aephaU1T8/AH8QEEWtETh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b546d319fa627942be0e5a5b8173986_JaffaCakes118

Files

3b546d319fa627942be0e5a5b8173986_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c78cef9bb863f43daefbbd6b8234ee5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathAddExtensionW
PathFindNextComponentW
PathFindExtensionW
PathIsURLW
StrStrIW
UrlEscapeW
PathFileExistsW
PathRemoveFileSpecW
PathAppendW
StrToIntExW
ColorAdjustLuma
PathCombineW
SHDeleteKeyW

comctl32

ImageList_Create
ImageList_DrawIndirect
ImageList_GetImageCount
InitCommonControlsEx
ImageList_Destroy
ImageList_Add
ImageList_GetIconSize

rpcrt4

UuidCreate
UuidToStringW
RpcStringFreeW

wininet

InternetSetOptionW

kernel32

CloseHandle
Sleep
CreateThread
EnterCriticalSection
LeaveCriticalSection
CompareStringA
lstrlenA
GetTickCount
GetLastError
SetLastError
GetCurrentThreadId
GetDateFormatW
LoadLibraryExW
GetModuleFileNameW
SetEvent
CreateEventW
ResetEvent
OutputDebugStringA
FindResourceW
GetCurrentProcessId
SetThreadPriority
WaitForSingleObject
GetPrivateProfileIntA
InitializeCriticalSection
DeleteCriticalSection
FreeResource
LockResource
SizeofResource
LoadResource
ReadFile
GetFileSize
CreateFileW
DeleteFileW
WriteFile
FindClose
FindNextFileW
FindFirstFileW
CreateDirectoryW
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetShortPathNameW
QueueUserAPC
DisableThreadLibraryCalls
RaiseException
LoadLibraryA
InterlockedExchange
LocalAlloc
GetCurrentThread
GetCurrentProcess
DuplicateHandle
GetModuleHandleW
GetVersionExW
lstrlenW
CompareStringW
LoadLibraryW
FreeLibrary
GetProcAddress
GlobalDeleteAtom
GlobalAddAtomW
WritePrivateProfileStringA
GetPrivateProfileStringA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MulDiv

user32

TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
MsgWaitForMultipleObjectsEx
SetWindowRgn
SystemParametersInfoW
DeleteMenu
GetSystemMetrics
MessageBoxW
LoadStringW
AttachThreadInput
SetParent
SendNotifyMessageW
ReplyMessage
ShowWindowAsync
GetNextDlgTabItem
FindWindowExW
ChildWindowFromPointEx
GetActiveWindow
CallMsgFilterW
PostThreadMessageW
GetMenuStringW
GetMenuState
GetMenuInfo
SetMenuInfo
SetMenuDefaultItem
GetWindowModuleFileNameW
GetDlgItemTextA
SetDlgItemTextA
wsprintfA
CheckDlgButton
IsDlgButtonChecked
EnableWindow
DispatchMessageW
PeekMessageW
PostQuitMessage
RedrawWindow
GetSubMenu
IsWindowUnicode
DrawFrameControl
CallWindowProcA
DefWindowProcA
LoadImageW
TrackPopupMenuEx
UpdateWindow
GetSysColor
GetDlgCtrlID
GetSysColorBrush
FillRect
GetDlgItem
SetWindowTextW
ShowWindow
InflateRect
IntersectRect
OffsetRect
DrawFocusRect
GetClassInfoW
RegisterClassW
SetWindowsHookExW
CallNextHookEx
IsWindowVisible
GetCapture
ReleaseCapture
SetCapture
WindowFromPoint
GetWindowThreadProcessId
BeginPaint
EndPaint
SetTimer
MapWindowPoints
AnimateWindow
UnhookWindowsHookEx
DestroyMenu
DestroyCursor
IsWindow
CopyRect
SetRect
GetClientRect
PostMessageW
GetAsyncKeyState
GetFocus
DestroyWindow
SetRectEmpty
GetCursorPos
PtInRect
KillTimer
InvalidateRect
TrackMouseEvent
CheckMenuRadioItem
CheckMenuItem
EqualRect
CreateWindowExW
GetDCEx
ReleaseDC
GetParent
GetWindowRect
SetWindowPos
SetMenuItemInfoW
EnableMenuItem
CreatePopupMenu
GetMenuItemCount
GetMenuItemInfoW
InsertMenuItemW
SendMessageW
GetClassNameW
SetPropW
GetPropW
GetWindow
GetWindowLongW
GetUpdateRect
IsWindowEnabled
GetAncestor
IsChild
SetFocus
ShowCursor
CallWindowProcW
GetCursor
LoadCursorW
SetCursor
RemovePropW
SetWindowLongW
DefWindowProcW
RegisterWindowMessageW
IsRectEmpty

gdi32

SetRectRgn
SetTextColor
RestoreDC
SelectObject
CreateFontIndirectW
FillRgn
CombineRgn
CreateRectRgn
CreateSolidBrush
GetObjectW
SaveDC
CreateRectRgnIndirect
GetTextExtentPoint32W
SetTextAlign
SetBkMode
GetTextColor
GetTextMetricsW
SetBkColor
DeleteObject
CreateCompatibleBitmap
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
GetStockObject
CreatePolygonRgn
PaintRgn
StretchDIBits
GetCurrentObject
GetBkColor
CreateDIBSection
OffsetRgn
CreateCompatibleDC
BitBlt
DeleteDC
ExtTextOutW

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyExW

ole32

OleUninitialize
CoInitialize
CoCreateInstance
OleInitialize
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantInit
VariantClear
SysFreeString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SysAllocStringLen
SysAllocString
SysStringLen

nscrt

wcstoul
time
_endthread
strlen
wcscmp
memcpy
realloc
memmove
memset
_vsnwprintf
strcmp
__CxxFrameHandler
_vsnprintf
malloc
free
memcmp
_wcsicmp
_wcsdup
_strdup
__CppXcptFilter
_adjust_fdiv
_initterm
_except_handler3
?terminate@@YAXXZ
_onexit
__dllonexit
strstr
wcslen
abs
sprintf
_purecall
labs
sin
cos
ceil
_hypot
atoi
_wcsnicmp

Exports

Exports

RegisterSetup
winampGetMediaLibraryPlugin

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c78cef9bb863f43daefbbd6b8234ee5e

Headers

File Characteristics

Imports

shlwapi

comctl32

rpcrt4

wininet

kernel32

user32

gdi32

advapi32

ole32

oleaut32

nscrt

Exports

Exports

Sections

.text Size: 142KB - Virtual size: 142KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 1024B - Virtual size: 5KB

.rsrc Size: 55KB - Virtual size: 55KB

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 142KB - Virtual size: 142KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 1024B - Virtual size: 5KB

.rsrc
Size: 55KB - Virtual size: 55KB

.reloc
Size: 11KB - Virtual size: 10KB