3e0e4beba369a841864012f19514cce6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3e0e4beba369a841864012f19514cce6_JaffaCakes118
Size

964KB
MD5

3e0e4beba369a841864012f19514cce6
SHA1

76024ef84d385fe111fe59c9246b73851b8b9e2c
SHA256

fcb9464b5cdcd5e9b586e2d79c0116d5b666dbc920da434b32ed9367ab0e3a24
SHA512

ef725880386b7710373099b92a694bb1c554b01ef8cdbcad2ef31624125b9f501b91f55e7531fe722b52790a8ed274dec9ed04aed56266acff4701e4b596bae9
SSDEEP

12288:aWalZQDuFgSWguiMJRtcok0EppsawX1wJG5z0GUMzL3:aWalZQsui+RtcsEpps/XqJG5z0zCL3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e0e4beba369a841864012f19514cce6_JaffaCakes118

Files

3e0e4beba369a841864012f19514cce6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d3bbc66b144ec74c02d3ab90bfca4750

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapCreate
HeapFree
WriteFile
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetACP
GetOEMCP
HeapReAlloc
IsBadWritePtr
LoadLibraryA
RtlUnwind
LCMapStringA
GetStringTypeA
InterlockedDecrement
InterlockedIncrement
HeapDestroy
CompareStringA
SetEnvironmentVariableA
InterlockedExchange
GetWindowsDirectoryA
GetSystemDirectoryA
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FreeLibrary
TlsGetValue
SetLastError
TlsFree
TlsAlloc
CloseHandle
lstrcpyA
MulDiv
ReadFile
SetFilePointer
GetFileSize
MapViewOfFile
UnmapViewOfFile
FindClose
GlobalMemoryStatus
FlushFileBuffers
RaiseException
SetStdHandle
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetEndOfFile
TlsSetValue
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GlobalSize
GlobalUnlock
GlobalLock
GlobalReAlloc
VirtualQuery
VirtualFree
GetLastError
GlobalFree
VirtualAlloc
GlobalAlloc

user32

GetSystemMetrics
GetWindowDC
OffsetRect
IsWindow
SetScrollInfo
GetParent
GetClientRect
MapWindowPoints
MoveWindow
GetWindowRect
ScreenToClient
CheckDlgButton
GetScrollInfo
PtInRect
UnionRect
IntersectRect
GetDC
ReleaseDC
GetActiveWindow
EndDialog
CheckRadioButton
ShowWindow
GetDlgItem

fpxlib

FPX_CloseImage
FPX_ClearSystem
FPX_SetResampleMethod
FPX_ReadImageRectangle
FPX_CreateImageByFilename
FPX_OpenImageByFilename
FPX_InitSystem
TestVersion
FPX_WriteImageLine
FPX_SetJPEGCompression
FPX_SetToolkitMemoryLimit

gdi32

CombineRgn
CreateRectRgn
DeleteDC
SelectObject
CreateCompatibleDC
GetDeviceCaps
BitBlt
SetDIBits
CreateCompatibleBitmap
GetDIBits
SetTextColor
SetBkMode
Rectangle
GetStockObject
CreateBitmap
GetRgnBox
GetEnhMetaFileHeader
PlayEnhMetaFileRecord
GetCurrentObject
EnumEnhMetaFile
CreatePen
CreateSolidBrush
CreateDIBSection
RealizePalette
SelectPalette
SetWinMetaFileBits
PlayEnhMetaFile
PatBlt
DeleteEnhMetaFile
DeleteObject

advapi32

RegCloseKey

Exports

Exports

ArcMemAlloc
ArcMemFree
ArcMemLock
ArcMemReAlloc
ArcMemSize
ArcMemUnlock
EZReadActiveGIFFile
EzDefineFilter
EzDibConvert16BitToTrueColor
EzDibConvert1BitToGrayScale
EzDibConvert1BitToTrueColor
EzDibConvert4BitToTrueColor
EzDibConvert8BitToTrueColor
EzDibConvertGrayScaleTo1Bit
EzDibConvertToImage
EzDibConvertTrueColorTo1Bit
EzDibConvertTrueColorTo4Bit
EzDibConvertTrueColorTo8Bit
EzDibConvertTrueColorToGrayScale
EzDibCrop
EzDibDisplay
EzDibDuplicate
EzDibGetInfo
EzDibGetSize
EzDibGetType
EzDibNew
EzDibResample
EzDibResampleFast
EzDibResampleHQ
EzDibSetColor
EzDibTransform
EzDisableLzw
EzDumpBmp
EzDumpBmpFile
EzDumpEps
EzDumpEpsFile
EzDumpFpxFile
EzDumpGif
EzDumpGifFile
EzDumpJpg
EzDumpJpgFile
EzDumpPcx
EzDumpPcxFile
EzDumpPng
EzDumpPngFile
EzDumpPsfAsImage
EzDumpPsfFileAsImage
EzDumpTga
EzDumpTgaFile
EzDumpTif
EzDumpTif48Bit
EzDumpTifFile
EzDumpTifFile48Bit
EzDumpWbmpFile
EzGetBmpFileSize
EzGetFileName
EzGetLastError
EzImageCropToDib
EzImageDelete
EzImageDiscardTextLayerWithUndo
EzImageDisplay
EzImageFlatten
EzImageGetCountOfTextLayer
EzImageResampleToDib
EzIsHugeVersion
EzIsLZWFile
EzIsLZWTif
EzIsLZWTifFile
EzLayerFromPoint
EzLayerMerge
EzLayerMergeDown
EzLoadBmpFileThumbnail
EzLoadBmpThumbnail
EzLoadEMFfile
EzLoadEMFfileMask
EzLoadEMFfileThumbnail
EzLoadFpxFile
EzLoadGif
EzLoadGifFile
EzLoadGifFileG
EzLoadGifG
EzLoadJpgFileCrop
EzLoadJpgFileThumbnail
EzLoadJpgFileThumbnailByOffset
EzLoadJpgFileThumbnailEx
EzLoadJpgThumbnail
EzLoadJpgThumbnailEx
EzLoadMemTif
EzLoadMemTif48Bit
EzLoadNefFile
EzLoadPcd
EzLoadPcdFile
EzLoadPcx
EzLoadPcxFile
EzLoadPng
EzLoadPngFile
EzLoadPsd
EzLoadPsdAsImage
EzLoadPsdFile
EzLoadPsdFileAsImage
EzLoadPsf
EzLoadPsfAsImage
EzLoadPsfFile
EzLoadPsfFileAsImage
EzLoadTga
EzLoadTgaFile
EzLoadTif
EzLoadTif48Bit
EzLoadTifFile
EzLoadTifFile48Bit
EzLoadWMFfile
EzLoadWMFfileThumbnail
EzLoadWbmp
EzLoadWbmpFile
EzOpenFile
EzOpenFileAsImage
EzOpenFileThumbnail
EzReadOwnInfoFromJpgHeader
EzSaveFile
EzSaveFileAsImage
EzSetGammaTable
EzSetHugeMemory
EzSetLastError
EzTextDelete
EzTextFlipVertically
EzTextGetColor
EzTextGetFont
EzTextGetPointSize
EzTextGetShadow
EzTextGetSize
EzTextGetSmoothEdge
EzTextGetString
EzTextGetWrapping
EzTextGetWrappingWidth
EzTextMove
EzTextNew
EzTextRotate
EzTextScale
EzTextSetColor
EzTextSetFont
EzTextSetPointSize
EzTextSetShadow
EzTextSetSmoothEdge
EzTextSetStringWithUndo
EzTextSetWrapping
EzTextSetWrappingWidth
EzTextToMask
EzWriteOwnInfoToJpgHeader
FreeGifHead
GetJpgSize
GetSelectFormat
GetSelectFormatString
Is1BitDIBGray
Is4BitDIBGray
LLGetBCUIntervals
LLGetJpgCropSize
LLGetJpgTransSize
LLJpgCrop
LLJpgTrans
LoadFormatList
SetAbortFunc
SetProgressFunc

Sections

.text
Size: 544KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 172KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3bbc66b144ec74c02d3ab90bfca4750

Headers

File Characteristics

Imports

kernel32

user32

fpxlib

gdi32

advapi32

Exports

Exports

Sections

.text Size: 544KB - Virtual size: 541KB

.rdata Size: 124KB - Virtual size: 122KB

.data Size: 172KB - Virtual size: 470KB

.rsrc Size: 100KB - Virtual size: 99KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 544KB - Virtual size: 541KB

.rdata
Size: 124KB - Virtual size: 122KB

.data
Size: 172KB - Virtual size: 470KB

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 20KB - Virtual size: 19KB