5c0d71c2af59caff6b3eb8f17885d724_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5c0d71c2af59caff6b3eb8f17885d724_JaffaCakes118
Size

1.8MB
MD5

5c0d71c2af59caff6b3eb8f17885d724
SHA1

5572a91ab71726c2fe34f7cfcf495ae69c9cfa14
SHA256

3e790b5a99c237f1f3df2beea12d9fce7861f4f40396d91a804c6e096c640688
SHA512

f89c4e91729c2853f490be0f8709288af732fe6d808fee1d9810b780504c28b9dff08e1dafb2a9da9298a9538c5502e3001c24f8646ca25322400b88689fdee8
SSDEEP

49152:bD6Khfk6aOPE8k5NSrLqEDOacdWcpncxPs9Ouo8:bO2fJ7cf5NS3qED5McBsYu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c0d71c2af59caff6b3eb8f17885d724_JaffaCakes118

Files

5c0d71c2af59caff6b3eb8f17885d724_JaffaCakes118
.dll windows:6 windows x86 arch:x86

3c07dfc6a3904c4fa472769d0878d03b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerFindFileW

dbghelp

FindDebugInfoFile

rpcrt4

MesEncodeIncrementalHandleCreate
MesEncodeFixedBufferHandleCreate
MesHandleFree
MesIncrementalHandleReset
MesBufferHandleReset

ws2_32

setsockopt
ioctlsocket
getsockopt
getaddrinfo
getnameinfo
ntohs
freeaddrinfo
send
recv
WSAGetLastError
connect
WSACancelAsyncRequest
WSAStartup
WSASocketW
WSAAsyncGetServByName
htons
WSAEnumProtocolsW
WSACleanup
socket
closesocket
WSASetLastError
shutdown

comctl32

ord8
CreateToolbarEx
PropertySheetA
ImageList_Destroy
ImageList_Merge
ord17
ImageList_Create
ord13

kernel32

SetCurrentDirectoryA
GetStartupInfoA
FindFirstFileA
GetLastError
SetLastError
lstrcmpiA
GetProcAddress
SetFileAttributesA
GlobalFree
FindClose
GetPrivateProfileStringA
LoadLibraryA
CreateFileMappingA
WritePrivateProfileStringA
GetModuleFileNameA
FindNextFileA
GetModuleHandleA
GetCurrentDirectoryA
CloseHandle
LocalFree
lstrcpyA
HeapSize
GetModuleFileNameW
HeapDestroy
HeapCreate
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
IsBadHugeReadPtr
GetCPInfo
IsProcessorFeaturePresent
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
RaiseException
HeapAlloc
HeapFree
GetCurrentProcess
TerminateProcess
DecodePointer
EncodePointer
MultiByteToWideChar
SetUnhandledExceptionFilter
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
FormatMessageW
GetStdHandle
GetFileType
GetVersion
GetModuleHandleW
FindFirstFileW
FindNextFileW
Sleep
GetSystemTime
LoadLibraryW
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
LCMapStringW
GetStringTypeW
RtlUnwind
GetConsoleCP
GetConsoleMode
CompareStringW
SetEnvironmentVariableA
GetDriveTypeW
EnterCriticalSection
GetLocaleInfoA
lstrlenA
SetFilePointer
lstrcmpA
GetFileSize
CreateFileA
SetupComm
GetFullPathNameA
ExitProcess
SetStdHandle
GetProcessHeap
GetTimeZoneInformation
WriteConsoleW
CreateFileW
FlushFileBuffers
SetHandleCount
InitializeCriticalSectionAndSpinCount
lstrcatA
ReadFile
CreateProcessA
MulDiv
GetFileAttributesA
WideCharToMultiByte
GlobalAlloc
GetCommandLineA
WriteFile
GetDateFormatA
FormatMessageA
GetTimeFormatA
SystemTimeToFileTime
FreeLibrary
SetEndOfFile
IsDebuggerPresent
lstrcpynA
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
LeaveCriticalSection
InterlockedIncrement

user32

DeleteMenu
LoadStringA
GetSubMenu
DrawTextA
IsCharAlphaA
SendDlgItemMessageA
PostQuitMessage
InsertMenuItemA
CreateDialogParamA
IsClipboardFormatAvailable
GetWindowRect
LoadMenuA
LoadIconA
MessageBeep
wsprintfA
WindowFromPoint
IsCharLowerA
GetClientRect
CreateMenu
SetFocus
GetWindowTextLengthA
SendMessageA
RegisterWindowMessageA
GetDC
IsDialogMessageA
TranslateMessage
GetMenu
GetWindowPlacement
GetWindowTextA
TrackPopupMenuEx
CheckMenuRadioItem
SetWindowLongA
MessageBoxA
CharToOemBuffA
CharUpperBuffA
CharLowerA
GetWindowLongA
CreateWindowExA
PeekMessageA
ReleaseDC
EnableMenuItem
TranslateAcceleratorA
SetClassLongA
GetDlgItem
EndDialog
DefWindowProcA
RedrawWindow
CharLowerBuffA
GetSysColor
SetWindowPos
GetCursorPos
GetMenuItemInfoA
LoadAcceleratorsA
ShowWindow
SetMenu
GetSysColorBrush
DrawMenuBar
GetMenuItemCount
IsWindow
PostMessageA
DispatchMessageA
IsWindowVisible
SetWindowTextA
EnableWindow
CallWindowProcA
DestroyMenu
SetMenuItemInfoA
LoadCursorA
GetDlgItemTextA
DialogBoxParamA
SetDlgItemTextA
GetDialogBaseUnits
OemToCharBuffA
RegisterClassA
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxW
GetMessageA
SetCursor
DestroyWindow
IsCharUpperA
InvalidateRect
GetParent

gdi32

StartPage
SetTextColor
DeleteDC
GetDeviceCaps
CreateFontIndirectA
SetBkColor
SetAbortProc
DeleteObject
SelectObject
SetMapMode
StartDocA
EndDoc
GetStockObject
AbortDoc
CreateSolidBrush
EndPage

comdlg32

ChooseColorA
GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA
ReplaceTextA
PageSetupDlgA
FindTextA
ChooseFontA
PrintDlgA
FindTextW
GetFileTitleW
GetFileTitleA

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegisterEventSourceW
RegCloseKey
SaferSetLevelInformation
SaferGetLevelInformation
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
ReportEventW
DeregisterEventSource
RegSetValueExA
IsTextUnicode
SaferCreateLevel
SaferCloseLevel
CredIsMarshaledCredentialA

shell32

DragFinish
ord155
SHGetInstanceExplorer
ord176
ord154
SHChangeNotify
ShellExecuteA
DragQueryFileA
CommandLineToArgvW

Exports

Exports

SwipeSourceLine
sxa_init_or_exit
wpan_endpoint_dispatch
wpan_endpoint_expire_conversations
xbee_cmd_list_callback
xbee_disc_device_type_str
xbee_disc_nodeid_cluster_handler
xbee_frame_write
xbee_io_query
xbee_io_query_status
xbee_xmodem_tx_init
zcl_command_build
zcl_default_response

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 420KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c07dfc6a3904c4fa472769d0878d03b

Headers

DLL Characteristics

File Characteristics

Imports

version

dbghelp

rpcrt4

ws2_32

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 295KB - Virtual size: 294KB

.data Size: 420KB - Virtual size: 464KB

.reloc Size: 64KB - Virtual size: 63KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 295KB - Virtual size: 294KB

.data
Size: 420KB - Virtual size: 464KB

.reloc
Size: 64KB - Virtual size: 63KB