44d9a95aebcdebc5a0c2969a644fb6e7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44d9a95aebcdebc5a0c2969a644fb6e7_JaffaCakes118
Size

86KB
MD5

44d9a95aebcdebc5a0c2969a644fb6e7
SHA1

8d815080c4cfe05f2fbaa0432e4490b66d69d04b
SHA256

2a9b45f92653e72a058ff4086cbb7c911bdaa173b2cebf06c75b9969953ef338
SHA512

bd78fd54894c27b5b4b5a1c1fd361b8ae8e922471039f1c8e3dd7aa9028d5b284bdd728eb6fde3acc0b7b8bdacd7810ede7ddd6e722ef7522fba26e43948524e
SSDEEP

1536:G5NEEAe0LKH21x4VflwU6cwaxdrW/XXTwzMVtMdYn:G5NBMM2DmfmU6cwcdAXXwMb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44d9a95aebcdebc5a0c2969a644fb6e7_JaffaCakes118

Files

44d9a95aebcdebc5a0c2969a644fb6e7_JaffaCakes118
.dll regsvr32 windows:5 windows x86 arch:x86

320e088ac1c8676d17073aabfe6a53ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

olepro32.pdb

Imports

user32

DrawIcon
GetSysColor
WinHelpW
IsWindow
EnableWindow
GetMessageA
GetMessageW
TranslateMessage
DispatchMessageW
DispatchMessageA
PostMessageW
PostQuitMessage
GetActiveWindow
SetActiveWindow
SetFocus
DestroyWindow
GetSystemMetrics
wsprintfA
GetTopWindow
IsWindowUnicode
GetClientRect
GetDialogBaseUnits
GetDC
ReleaseDC
GetKeyState
GetWindowLongW
CharNextA
GetWindowTextA
CharLowerA
GetParent
SendMessageW
GetFocus
GetDlgItem
GetIconInfo
DestroyIcon
SetWindowLongW
CreateIcon
CreateCursor
CopyIcon
CopyImage
RegisterClipboardFormatA
wsprintfW

gdi32

GetBitmapBits
SetDIBits
SetBitmapBits
EnumFontFamiliesExW
GetTextFaceW
CreateHalftonePalette
Escape
CreateDIBSection
CreateDIBitmap
SetStretchBltMode
SetBkColor
SetTextColor
GetCurrentObject
GetObjectType
GetStockObject
RealizePalette
StretchBlt
GetDIBits
StretchDIBits
SaveDC
IntersectClipRect
GetWindowOrgEx
OffsetViewportOrgEx
PlayEnhMetaFile
EnumMetaFile
RestoreDC
DeleteEnhMetaFile
DeleteMetaFile
PlayMetaFileRecord
SelectPalette
CreatePalette
GetEnhMetaFileBits
GetMetaFileBitsEx
CreateCompatibleDC
CreateFontIndirectW
CreateFontIndirectA
GetDeviceCaps
DeleteObject
GetTextExtentPointA
GetTextMetricsW
SelectObject
GetPaletteEntries
PatBlt
CreateBitmap
SetMetaFileBitsEx
GetBitmapDimensionEx
GetObjectW
GetEnhMetaFileHeader
GetWinMetaFileBits
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
SetEnhMetaFileBits
DeleteDC
BitBlt
CreateCompatibleBitmap

kernel32

MultiByteToWideChar
IsDBCSLeadByte
FreeLibrary
MulDiv
LockResource
LoadResource
FindResourceW
InterlockedIncrement
InterlockedDecrement
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
EnterCriticalSection
lstrlenW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GlobalDeleteAtom
GlobalAddAtomW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
GetVersion
GetSystemDirectoryA
GetLastError
LoadLibraryA

advapi32

RegOpenKeyA
RegOpenKeyW
RegCreateKeyA
RegSetValueA
RegQueryValueW
RegFlushKey
RegCloseKey

msvcrt

free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
?terminate@@YAXXZ
wcslen
wcscpy
wcsrchr
??3@YAXPAX@Z
wcsncat
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
wcsncpy
calloc
_wcslwr
wcscmp
_wcsicmp
_ftol
_CIfmod
_except_handler3

ole32

StgCreateDocfile
StringFromGUID2
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
ReleaseStgMedium
CoCreateInstance
CoGetMalloc

oleaut32

LoadTypeLi
VariantInit
VariantClear
SysFreeString
SysAllocString
VariantChangeType

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OleCreateFontIndirect
OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleIconToCursor
OleLoadPicture
OleTranslateColor

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.texc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

320e088ac1c8676d17073aabfe6a53ff

Headers

File Characteristics

PDB Paths

Imports

user32

gdi32

kernel32

advapi32

msvcrt

ole32

oleaut32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 64KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 13KB - Virtual size: 16KB

.reloc Size: 4KB - Virtual size: 4KB

.data2 Size: 1024B - Virtual size: 4KB

.texc Size: 2KB - Virtual size: 4KB

.text
Size: 64KB - Virtual size: 64KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 13KB - Virtual size: 16KB

.reloc
Size: 4KB - Virtual size: 4KB

.data2
Size: 1024B - Virtual size: 4KB

.texc
Size: 2KB - Virtual size: 4KB