47c430a9be00fd6b5d9e3525b8d3884f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

47c430a9be00fd6b5d9e3525b8d3884f_JaffaCakes118
Size

221KB
MD5

47c430a9be00fd6b5d9e3525b8d3884f
SHA1

347e5fb1b17c44a6fac03f5a560c309f6e2b1fe4
SHA256

576482ac772481775cb9a46254262a8766e5e555503a863f7d4d2068777155d1
SHA512

1a2ff4eec46318c82c6e7f0e86389e0bb74f79f9ac624cce0b89029d30caf680f59036d7e1159add064b413171e14961985294c9b4fc9800139989889b8c9c8e
SSDEEP

6144:Y3Ub6asdFZnfhi5doo/B7HKJ83Lxv+cphBdXO2T2OPb:Y3UuFZfhQBuJwLxvvB9O2T2OD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47c430a9be00fd6b5d9e3525b8d3884f_JaffaCakes118

Files

47c430a9be00fd6b5d9e3525b8d3884f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

cfad7c7033898de361eaa2000f31a69b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

W:\qgHHnnoggmjl\EwnuyYYtKa\apuwhPNyfiq.pdb

Imports

gdi32

EnumFontFamiliesW
CreateEllipticRgnIndirect
GetRgnBox
ResizePalette
CreateFontIndirectW
PatBlt
GetDIBits
RestoreDC
CreatePalette
GetLayout
BitBlt
CreateRectRgn
IntersectClipRect
GetTextExtentPointW
GetTextExtentExPointW
DeleteDC
GetPixel
SetAbortProc
SetTextColor
StretchBlt
SetDIBitsToDevice
SetTextAlign
SetPaletteEntries
CreateCompatibleBitmap
SaveDC
RealizePalette
EndDoc
CreateDiscardableBitmap
CreatePenIndirect
SetBkColor
CreatePatternBrush
CreateBitmapIndirect
CreateRoundRectRgn
SetViewportOrgEx
GetTextFaceW
Polyline
SetRectRgn
SetBkMode
SetBitmapDimensionEx
SetROP2
WidenPath
PolyBezier
StartPage
CreateCompatibleDC
GetNearestPaletteIndex
CombineRgn

kernel32

GlobalHandle
GetCurrentDirectoryW
SetEvent
GetSystemWindowsDirectoryA
HeapWalk
lstrlenW
CreateEventA
FindNextFileA
GetThreadTimes
lstrcmpA
LoadLibraryW
SetCurrentDirectoryA
GetSystemInfo
CopyFileW
HeapCreate
CancelIo
lstrcmpW
VerifyVersionInfoW
FindResourceA
GetCommConfig
DeviceIoControl
DuplicateHandle
GetSystemWindowsDirectoryW
GetModuleFileNameA
GlobalLock
DisconnectNamedPipe
GetStdHandle
GetShortPathNameW
VerSetConditionMask
GetFullPathNameW
FileTimeToLocalFileTime
FlushFileBuffers
IsBadCodePtr
LocalAlloc
SetThreadPriority
CreateFileA
LeaveCriticalSection
GetProcAddress
FindFirstFileA
GlobalFindAtomW
SetUnhandledExceptionFilter
HeapValidate
GetFileAttributesA
lstrcpyW
CreateThread
ReadFile
GetTimeFormatA
SetCommMask
IsValidLocale
GetLocaleInfoA

user32

SetMenu
GrayStringW
GetDesktopWindow
MapWindowPoints
VkKeyScanW
EnableScrollBar
FindWindowExW
SetScrollRange
DrawFrameControl
LoadBitmapW
GetSysColor
ReleaseDC
GetMenuStringW
InsertMenuA
MessageBoxA
ModifyMenuW
MapDialogRect
CharLowerW
KillTimer
SendDlgItemMessageA
GetDCEx
SetWindowLongW
SetWindowPos
CreatePopupMenu
GetKeyboardType
RegisterWindowMessageW
EnableMenuItem
HiliteMenuItem
GetCursorPos
GetUpdateRgn
LookupIconIdFromDirectory
TabbedTextOutW
GetParent
IsDialogMessageA
UnloadKeyboardLayout
GetFocus
SetMenuDefaultItem
FrameRect
DefDlgProcW
RegisterClassExA
GetMenuItemCount
DeleteMenu
MapVirtualKeyA
CallWindowProcA
MessageBoxExA
GetMessageA
SetCursor
IsCharAlphaNumericW
InternalGetWindowText
GetClassInfoA
GetNextDlgGroupItem
CreateDialogIndirectParamW
RegisterClassA
InvertRect
ShowOwnedPopups
GetWindow
RegisterClassW
MoveWindow
CallWindowProcW
GetDlgItemInt
DialogBoxParamW
GetDlgCtrlID
LoadBitmapA
GetMenuState
MonitorFromPoint
GetDlgItem
GetAsyncKeyState
CreateIconFromResource
EndTask
GetSubMenu
DialogBoxIndirectParamW
GetMessageExtraInfo
CharPrevA
DialogBoxParamA
SetUserObjectInformationW
ChangeMenuW
SetScrollPos
SetDlgItemInt
RedrawWindow
ValidateRect
IsWindow
TranslateMessage
OpenIcon
AppendMenuW
SetWindowTextA
GetWindowPlacement
CascadeWindows
GetScrollInfo
IsWindowVisible
DefDlgProcA
ScreenToClient
RegisterClassExW
wvsprintfW
GetSysColorBrush
LoadCursorA
GetTopWindow
CreateCursor
GetMenuItemID
DefFrameProcW
GetClassNameW
GetClassInfoExA
LoadAcceleratorsA
LoadMenuA
GetWindowTextA
ToUnicodeEx
InSendMessageEx
UpdateWindow
SendMessageW
SendMessageA
CharNextExA

msvcrt

_controlfp
iswctype
wcstok
realloc
ftell
wcspbrk
putchar
fputs
isspace
__set_app_type
calloc
__p__fmode
wcstod
fflush
malloc
time
wcscspn
wcstol
__p__commode
remove
wcsncmp
_amsg_exit
srand
_initterm
_ismbblead
wcscat
_XcptFilter
iswprint
strcspn
_exit
fgets
_cexit
free
mbstowcs
__setusermatherr
islower
fprintf
wcscpy
clearerr
__getmainargs
wcsstr
gets
qsort
fgetc

Exports

Exports

?DecrementProviderExW@@YGPADPAFK[W

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.packed
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfad7c7033898de361eaa2000f31a69b

Headers

File Characteristics

PDB Paths

Imports

gdi32

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 186KB - Virtual size: 186KB

.packed Size: 13KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 186KB - Virtual size: 186KB

.packed
Size: 13KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 2KB - Virtual size: 1KB