5ca70dea70f852019e0627aacced37a3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5ca70dea70f852019e0627aacced37a3_JaffaCakes118
Size

269KB
MD5

5ca70dea70f852019e0627aacced37a3
SHA1

cad3cec475b9c3ce9688f2fb247ef822735d32a4
SHA256

318f19d42729cda187f6653fbba4705e8f32943c4647c79859608e613f62ca8a
SHA512

6696c3cdb2f484a32767a073bc1bd3e88c39b91ee8d600aaa29ea5d170a200133f1e2fd922077ca692ace71ed53aa0d0eb45b31df907536d2245156b4ee9fe7f
SSDEEP

6144:UJDXvx4YtFXSEyH6RIE3uw5mAm1P6y9Vc22ZH0+N4LDLGPt:jYtFXByak7QD4fLGl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ca70dea70f852019e0627aacced37a3_JaffaCakes118

Files

5ca70dea70f852019e0627aacced37a3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3d90e0a5e3417b5321efb538a2963360

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

WOWShellExecute
SHLoadNonloadedIconOverlayIdentifiers
SHLoadInProc
SHGetSpecialFolderLocation
SHFreeNameMappings
SHExtractIconsW
SHBindToParent
DragAcceptFiles

ddraw

DSoundHelp
DDInternalUnlock
DDInternalLock
DirectDrawCreateEx

advapi32

RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey

oleaut32

VariantInit
VariantClear
VarUI4FromStr
VarDecFromCy
SysStringLen
SysStringByteLen
SysFreeString
SysAllocString
LoadTypeLi
LoadRegTypeLi

kernel32

FindResourceA
FlushInstructionCache
FreeLibrary
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
SetLastError
SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcpynA
EnterCriticalSection
lstrlenW
DisableThreadLibraryCalls
DeleteCriticalSection
GetLocaleInfoA
lstrlenA

comctl32

ord17

gdi32

SaveDC
SelectObject
SetBkMode
SetBrushOrgEx
SetGraphicsMode
SetTextColor
SetViewportOrgEx
RestoreDC
ModifyWorldTransform
GetObjectA
GetDIBColorTable
GetDCOrgEx
EnumMetaFile
EnumEnhMetaFile
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
SetWindowOrgEx
CreateCompatibleBitmap
BitBlt

user32

AnimateWindow
BeginPaint
CallWindowProcA
CharNextA
CreateAcceleratorTableA
CreateWindowExA
DdeEnableCallback
DdeSetQualityOfService
DefWindowProcA
DestroyAcceleratorTable
DestroyWindow
DialogBoxIndirectParamA
DragObject
EnableWindow
EndDialog
EndPaint
EnumDisplayMonitors
EqualRect
FillRect
GetActiveWindow
GetClassInfoExA
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetFocus
GetParent
GetSysColor
GetWindow
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
InvalidateRgn
IsChild
IsWindow
KillTimer
LoadCursorA
LoadStringA
MapDialogRect
MessageBoxA
MonitorFromPoint
PtInRect
RedrawWindow
RegisterClassExA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SendMessageA
SetCapture
SetCursor
SetFocus
SetWindowContextHelpId
SetWindowLongA
SetWindowPos
SetWindowTextA
SwapMouseButton
wsprintfA

Exports

Exports

ConvertMeshSubsetToSingleStrip
CreateEffectPool
CreateFontW
CreateVolumeTextureFromFileInMemoryEx
CreateVolumeTextureFromResourceExW
GatherFragments
GetComment
GetJ2KOptions
LoadMeshHierarchyFromXInMemory
LoadPRTBufferFromFileA
MatrixInverse
MatrixTransformation
SimplifyMesh
mpegInOpenMPEGIdxW

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d90e0a5e3417b5321efb538a2963360

Headers

File Characteristics

Imports

shell32

ddraw

advapi32

oleaut32

kernel32

comctl32

gdi32

user32

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 40KB

.rdata Size: 126KB - Virtual size: 125KB

.data Size: 42KB - Virtual size: 42KB

.rsrc Size: 56KB - Virtual size: 56KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 41KB - Virtual size: 40KB

.rdata
Size: 126KB - Virtual size: 125KB

.data
Size: 42KB - Virtual size: 42KB

.rsrc
Size: 56KB - Virtual size: 56KB

.reloc
Size: 2KB - Virtual size: 1KB