4d150543a2a9021df2d10049fbdee432_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4d150543a2a9021df2d10049fbdee432_JaffaCakes118
Size

160KB
MD5

4d150543a2a9021df2d10049fbdee432
SHA1

8fdbda12bbd62dc5605b1400e78b2b4c26493620
SHA256

c15fd7bc0763a359d8f068921c1b9dae6bcdbee8995c96a1671c5ba40a3c8a6a
SHA512

d900c9ff935e383bf446af2299ee22a8407dee0376eabf1b88343a594b0b78240f2e1f6bf2711ea96d934fb5ee0b2b742bf759f0c7a4dc063dd24d69554fa7ec
SSDEEP

3072:S6iAyTRAg50jibnTBgdklKRQwtDoBrgXqALfCWge/QAzm:S9AyVAoDTBgdklKRQeDoBvY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d150543a2a9021df2d10049fbdee432_JaffaCakes118

Files

4d150543a2a9021df2d10049fbdee432_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5cf5c34321da5bdf6c4dc083f4b30e4a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

avifil32.pdb

Imports

msvcrt

_purecall
free
malloc
_adjust_fdiv
mbstowcs
_ftol
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
_vsnwprintf
_initterm
memmove

user32

SetRect
SetRectEmpty
IsRectEmpty
CharPrevW
DestroyWindow
GetDC
ReleaseDC
PeekMessageW
TranslateMessage
MessageBoxW
LoadStringW
EnableWindow
GetDlgItem
SetDlgItemTextW
wsprintfW
DispatchMessageW
DialogBoxParamW
IsDlgButtonChecked
GetDlgItemInt
EndDialog
SendMessageW
CheckDlgButton
SetDlgItemInt
SendDlgItemMessageW
MessageBeep

kernel32

GetLastError
GlobalSize
GetCurrentThreadId
DeleteCriticalSection
IsBadReadPtr
ResetEvent
EnterCriticalSection
InitializeCriticalSection
lstrcpyW
lstrcmpW
WideCharToMultiByte
MultiByteToWideChar
GetOverlappedResult
ReadFile
CloseHandle
CreateEventW
GetFileSize
VirtualAlloc
GetFullPathNameW
CreateFileW
QueryPerformanceCounter
LeaveCriticalSection
WriteFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualProtect
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalHandle
MulDiv
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
lstrlenA
lstrcpynW
lstrlenW
lstrcatW
SetErrorMode
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
GetTickCount

gdi32

CreateHalftonePalette
CreatePalette

winmm

mmioRead
mmioOpenW
mmioWrite
mmioSeek
mmioClose

advapi32

RegQueryValueExA
RegOpenKeyW
RegOpenKeyA
RegCloseKey
RegQueryValueW
RegEnumKeyW

ole32

CoGetMarshalSizeMax
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
CoCreateInstance
OleGetClipboard
ReleaseStgMedium
OleSetClipboard
OleUninitialize
OleInitialize
CoGetMalloc
OleFlushClipboard

msacm32

acmMetrics
acmGetVersion
acmFormatDetailsW
acmFormatTagDetailsW
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
acmStreamClose
acmStreamUnprepareHeader
acmStreamConvert
acmFormatChooseW

msvfw32

ICCompressorFree
ICCompressorChoose
ICClose
ICGetInfo
ICLocate
ICSendMessage
ICOpen
ICDecompress
ICCompress
ICGetDisplayFormat

Exports

Exports

AVIBuildFilter
AVIBuildFilterA
AVIBuildFilterW
AVIClearClipboard
AVIFileAddRef
AVIFileCreateStream
AVIFileCreateStreamA
AVIFileCreateStreamW
AVIFileEndRecord
AVIFileExit
AVIFileGetStream
AVIFileInfo
AVIFileInfoA
AVIFileInfoW
AVIFileInit
AVIFileOpen
AVIFileOpenA
AVIFileOpenW
AVIFileReadData
AVIFileRelease
AVIFileWriteData
AVIGetFromClipboard
AVIMakeCompressedStream
AVIMakeFileFromStreams
AVIMakeStreamFromClipboard
AVIPutFileOnClipboard
AVISave
AVISaveA
AVISaveOptions
AVISaveOptionsFree
AVISaveV
AVISaveVA
AVISaveVW
AVISaveW
AVIStreamAddRef
AVIStreamBeginStreaming
AVIStreamCreate
AVIStreamEndStreaming
AVIStreamFindSample
AVIStreamGetFrame
AVIStreamGetFrameClose
AVIStreamGetFrameOpen
AVIStreamInfo
AVIStreamInfoA
AVIStreamInfoW
AVIStreamLength
AVIStreamOpenFromFile
AVIStreamOpenFromFileA
AVIStreamOpenFromFileW
AVIStreamRead
AVIStreamReadData
AVIStreamReadFormat
AVIStreamRelease
AVIStreamSampleToTime
AVIStreamSetFormat
AVIStreamStart
AVIStreamTimeToSample
AVIStreamWrite
AVIStreamWriteData
CreateEditableStream
DllCanUnloadNoc
DllGetClassObject
EditStreamClone
EditStreamCopy
EditStreamCut
EditStreamPaste
EditStreamSetInfo
EditStreamSetInfoA
EditStreamSetInfoW
EditStreamSetName
EditStreamSetNameA
EditStreamSetNameW
IID_IAVIEditStream
IID_IAVIFile
IID_IAVIStream
IID_IGetFrame

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cf5c34321da5bdf6c4dc083f4b30e4a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

user32

kernel32

gdi32

winmm

advapi32

ole32

msacm32

msvfw32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 75KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 79KB - Virtual size: 79KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 76KB - Virtual size: 75KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 79KB - Virtual size: 79KB

.reloc
Size: 3KB - Virtual size: 2KB