5d4ca1449f1a356889375240c46af034_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5d4ca1449f1a356889375240c46af034_JaffaCakes118
Size

87KB
MD5

5d4ca1449f1a356889375240c46af034
SHA1

d598e87d281db91d7aa38a72d20289cf05038a6f
SHA256

488561965623054bdeaca3f839d971001183083f45847e5384fccef2bfc93042
SHA512

fbb3fd0e5deb35ee20a426a5d96f03f39c71853131912d6eaaf0d6b0c81708e6e29fd9d84f66b3b1011ad5dc4094af7537a4004eac85a4ad6ec64658a492dfbb
SSDEEP

1536:mkaYpPJZz5yOJSi/aJ8jy5XKkkT1QhzaBavuwKPHktKYn8n+Lmokx+:mGlqxAQhZ0H5Yn0nx+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d4ca1449f1a356889375240c46af034_JaffaCakes118

Files

5d4ca1449f1a356889375240c46af034_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5563f2d7d1946dc0bfec3ed87540e25f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

gdi32

RestoreDC
GetRasterizerCaps
GetTextExtentPoint32A
CreateDIBPatternBrushPt
CreateBrushIndirect
SetWindowOrgEx
EndPage
SetBkColor
OffsetWindowOrgEx
EndDoc
Polyline
LineTo
GetNearestColor
GetDeviceCaps
GetBkColor
ExtTextOutA
CreatePen
AnimatePalette
PlayEnhMetaFileRecord
DeleteDC
GetTextCharsetInfo
GetTextColor
SetTextAlign
LPtoDP
Polygon

kernel32

HeapAlloc
GlobalAlloc
VirtualAlloc
SearchPathA
GetLocaleInfoW
LoadResource
CloseHandle
GetEnvironmentStringsW
SetThreadPriority
GetACP
SetUnhandledExceptionFilter
CreateEventA
GlobalGetAtomNameW
SetErrorMode
DeleteFileA
CreateProcessW
EnterCriticalSection
InterlockedDecrement
GetStringTypeA
FreeEnvironmentStringsW
SystemTimeToFileTime
WriteFile
HeapCreate
SetHandleCount
SetCurrentDirectoryW
GetModuleFileNameA
TerminateProcess
DeleteCriticalSection
IsValidCodePage
GetSystemDefaultLCID
GetTimeZoneInformation
GetSystemDefaultLangID

ntdll

NtOpenTimer
NtSetDefaultLocale
RtlAddAce
NtQuerySystemTime
NtResumeThread
NtQueryInformationFile
RtlInitUnicodeString
RtlCompareString
ZwSetEvent

advapi32

RegOpenKeyExA
RegOpenKeyA

user32

GetWindowTextA
SetCaretPos
SetClipboardViewer
GetParent
ReleaseCapture
SetClassLongA
DefWindowProcW
ActivateKeyboardLayout
EnumChildWindows
SetScrollPos
GetTopWindow
DestroyCursor
PostMessageA
SetWindowPos
RegisterClassW
DispatchMessageW
CreateCaret
GetMessagePos
IsZoomed
PostMessageW
RemoveMenu
LoadImageA
SetForegroundWindow
KillTimer
InvertRect
CopyAcceleratorTableA
RegisterClassExA
DefMDIChildProcW
DefWindowProcA
EnumWindows

dbgename

_Denorm
_Hugeval
_LSnan
_Stof
_Nan
_Dscale
_LNan
_LDtest
_Strxfrm
_FDenorm
_FExp

ole32

OleCreateFromFile
RevokeDragDrop
OleTranslateAccelerator
CreateFileMoniker
CoTaskMemFree
WriteClassStm
OleIsRunning
OleCreateLinkToFile
StringFromCLSID
OleCreateMenuDescriptor
StgIsStorageFile
OleRegGetMiscStatus
ReadClassStg

Exports

Exports

SetActionLogMode
CreateProcessNotify
ReinitOverStruct
SetSetupOpen
QueryApplication
RegisterApplication
GetCatalogObject
SetSilent
CreateUnimodemTimer
SetSetupSave
CreateOverStructPool
CloseAppRegEnum
GetSimpleTableDispenser
CancelUnimodemTimer
SetActionLogFile
ExecuteAction
RefreshAppRegEnum
SetUnimodemTimer
OpenComponentLibraryOnMemEx
ResetCallCount

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5563f2d7d1946dc0bfec3ed87540e25f

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

ntdll

advapi32

user32

dbgename

ole32

Exports

Exports

Sections

.text Size: 70KB - Virtual size: 70KB

.data Size: 14KB - Virtual size: 14KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 70KB - Virtual size: 70KB

.data
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB