42bde0601aa8078543151ccd5cdc83bb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42bde0601aa8078543151ccd5cdc83bb_JaffaCakes118
Size

288KB
MD5

42bde0601aa8078543151ccd5cdc83bb
SHA1

afd8954b5ab2a37142478c4934fc970d5baa94d0
SHA256

ca8d4816306ed34ece87fca0f70fb73a037c146c7551bb0fa99f9a6715aa72af
SHA512

57dfc184ebb8105c65442e89425d4ac2939362322d13b75a92a160005ab01bb95ab32a5c50c879f7ecfab5f26354b5d5f6293a7ce46ed637d91da0bc40c1c663
SSDEEP

6144:QraxDU69RM31BOJJNju57sDzFZwO9FFt:dx5HM31QuWPNFFt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42bde0601aa8078543151ccd5cdc83bb_JaffaCakes118

Files

42bde0601aa8078543151ccd5cdc83bb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

46dd5311ac5b166c1b1adcde848c6698

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetDriveTypeA
GetModuleFileNameA
GetWindowsDirectoryA
lstrcpynA
DeleteFileA
_lread
lstrcpyA
lstrlenA
FindClose
FindFirstFileA
CloseHandle
CreateFileA
GlobalUnlock
FreeLibrary
MulDiv
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrcatA
lstrcmpiA
GetProcAddress
GlobalAlloc
GlobalLock
GlobalFree
_llseek

user32

CreateDialogParamA
DispatchMessageA
TranslateMessage
PeekMessageA
CopyRect
DestroyWindow
SetActiveWindow
SetFocus
SendDlgItemMessageA
GetDlgItemInt
CharLowerA
ShowWindow
UpdateWindow
GetParent
EnableWindow
GetClientRect
InflateRect
SetDlgItemTextA
CheckRadioButton
EndDialog
SetDlgItemInt
GetScrollRange
GetScrollPos
SetScrollPos
GetDlgItem
SetScrollRange
GetDC
ReleaseDC
MessageBeep
wsprintfA
GetActiveWindow
MessageBoxA
LoadStringA
FillRect

gdi32

CreatePalette
GetObjectA
GetStockObject
SelectObject
MoveToEx
LineTo
CreatePen
GetPaletteEntries
DeleteObject

msvcrt

_ftol
_strcmpi
strrchr
strncpy
_stricmp
rename
_except_handler3
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

AllCloseDLL
AllDecodeImg
AllEncodeImg
AllGetCommonPath
AllGetErrorCode
AllGetFileName
AllGetFileType
AllGetImageCount
AllGetOneCaps
AllGetReadWriteCaps
AllGetSaveCaps
AllGetVersion
AllOpenDLL
AllReadAlpha
AllReadDIBHandle
AllReadDIBImg
AllReadDIBImgM
AllReadDIBThumbnailHandle
AllReadHeader
AllReadHeaderM
AllReadImageWithAlpha
AllReadImg
AllReadPalette
AllReadPaletteM
AllSaveDIBImg
AllSaveDIBImgM
AllSaveImageWithAlpha
AllSaveImg
AllSetReadOption
AllSetSaveOption
AllSetSubformat
AllSetWaitingBar
xDlgInfoProc
xDlgProcJPG
xDlgProcTIF
xDlgProcWMF

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46dd5311ac5b166c1b1adcde848c6698

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 180KB - Virtual size: 180KB

.rsrc Size: 68KB - Virtual size: 65KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 180KB - Virtual size: 180KB

.rsrc
Size: 68KB - Virtual size: 65KB

.reloc
Size: 4KB - Virtual size: 2KB