5d8b19ab48556fdc343599dbf6a31a18_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5d8b19ab48556fdc343599dbf6a31a18_JaffaCakes118
Size

835KB
MD5

5d8b19ab48556fdc343599dbf6a31a18
SHA1

14c50462ba490308d18c5194945e5a64025d47cc
SHA256

4687b11b9fa7dd0d7c6cf4cb2b3524046b28d980c93215f646adcfa64b0f3c35
SHA512

e4ad9fe1b29fc83b728fb51b060543629ace615aa4722dbcb335755d203d4712108018eb946dc27dd617b349938f7cf7221b0b16bb69fe8205a04d6f6ecd0c7f
SSDEEP

24576:H5s6zoWjDfMn2fBF1rCTNiXMP9Qe3hCrV:H5s6zoIDMoBFJCgXMPCmhCrV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d8b19ab48556fdc343599dbf6a31a18_JaffaCakes118

Files

5d8b19ab48556fdc343599dbf6a31a18_JaffaCakes118
.dll windows:5 windows x86 arch:x86

307c9b2b1262b2579ad2512fcd43f469

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GlobalAddAtomA
CompareStringW
LockResource
GetTimeFormatA
HeapFree
TlsGetValue
IsValidCodePage
TlsAlloc
ExitProcess
CloseHandle
GlobalFlags
GetSystemInfo
CompareStringA
InterlockedIncrement
GetLocaleInfoA
LockFile
lstrcmpA
LCMapStringW
FileTimeToLocalFileTime
GetCurrentProcess
GetSystemTimeAsFileTime
GetFullPathNameA
GlobalUnlock
EnumResourceLanguagesA
GetVolumeInformationA
SetUnhandledExceptionFilter
WaitForSingleObject
GetTimeZoneInformation
GetStartupInfoA
GlobalFindAtomA
FreeEnvironmentStringsA
SetThreadPriority
SuspendThread
GetFileSizeEx
GetThreadLocale
GetEnvironmentStringsW
RtlUnwind
QueryPerformanceCounter
GetConsoleCP
InitializeCriticalSection
GlobalHandle
VirtualQuery
InterlockedExchange
LocalReAlloc
GetConsoleOutputCP
GetEnvironmentStrings
CreateThread
lstrlenA
GetACP
WriteConsoleA
CreateEventA
SetHandleCount
LocalAlloc
LocalFree
FindResourceExA
GetCPInfo
MulDiv
SetStdHandle
VirtualAlloc
LoadResource
SetEndOfFile
GetFileAttributesA
GetStringTypeA
ExitThread
HeapAlloc
UnlockFile
GetDateFormatA
LeaveCriticalSection
FormatMessageA
GetModuleHandleW
TerminateProcess
SetLastError
UnhandledExceptionFilter
LCMapStringA
ReadFile
GetCurrentThreadId
FreeLibrary
TlsFree
GetStdHandle
ConvertDefaultLocale
CreateFileA
GetStringTypeW
HeapCreate
ResumeThread
GetLastError
GetModuleFileNameA
GlobalGetAtomNameA
WriteConsoleW
FreeResource
Sleep
GetFileType
DuplicateHandle
FlushFileBuffers
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
TlsSetValue
HeapSize
GlobalLock
FindFirstFileA
FindResourceA
WideCharToMultiByte
SetEnvironmentVariableA
SetFilePointer
RaiseException
GetProcAddress
GetCurrentProcessId
WriteFile
GetFileTime
InterlockedDecrement
GlobalDeleteAtom
DeleteFileA
VirtualFree
WritePrivateProfileStringA
SetErrorMode
SizeofResource
GetModuleFileNameW
IsDebuggerPresent
GetDriveTypeA
DeleteCriticalSection
MultiByteToWideChar
GetVersionExA
GlobalReAlloc
GlobalFree
GetCommandLineA
SetEvent
GetTickCount
FreeEnvironmentStringsW
GetConsoleMode
lstrcmpW
HeapReAlloc
GetCurrentDirectoryA
GetCurrentThread
VirtualProtect
ExpandEnvironmentStringsA
GetModuleHandleA
EnterCriticalSection
GetOEMCP
GlobalAlloc
GetFileSize
FindClose

user32

SetWindowTextA
SystemParametersInfoA
GetWindowRect
GetDesktopWindow
SetWindowLongA
SendMessageA
GetClassInfoExA
EnableMenuItem
GetDlgCtrlID
MapWindowPoints
GetLastActivePopup
GetParent
SetCursor
GetClassNameA
GetCapture
InvalidateRect
CallWindowProcA
GetWindowTextA
BeginPaint
EqualRect
GetMessageA
GetNextDlgTabItem
GetWindowTextLengthA
GetSystemMenu
GrayStringA
GetWindowThreadProcessId
CopyAcceleratorTableA
CheckMenuItem
ReleaseCapture
LoadBitmapA
DrawTextA
SetWindowRgn
KillTimer
IsDialogMessageA
IsWindowEnabled
DefWindowProcA
GetMenu
GetSystemMetrics
GetClassLongA
AdjustWindowRectEx
GetMenuItemID
GetKeyState
IntersectRect
CreatePopupMenu
CopyRect
MessageBoxA
RegisterClipboardFormatA
SetWindowPos
CreateDialogIndirectParamA
GetCursorPos
WindowFromPoint
TrackPopupMenu
SetWindowContextHelpId
InvalidateRgn
GetDlgItem
WinHelpA
AppendMenuA
PostMessageA
SetPropA
GetMessagePos
GetActiveWindow
LoadIconA
ReleaseDC
EndDialog
CharUpperA
GetSubMenu
RegisterWindowMessageA
LoadCursorA
ValidateRect
SetCapture
PtInRect
InsertMenuA
RemovePropA
ModifyMenuA
EndPaint
SetForegroundWindow
SetMenuItemBitmaps
PostQuitMessage
DispatchMessageA
GetClientRect
FillRect
GetTopWindow
CallNextHookEx
SetMenu
DrawIcon
GetMenuCheckMarkDimensions
GetWindowDC
GetMenuItemCount
DestroyMenu
GetForegroundWindow
DrawFrameControl
IsWindowVisible
RegisterClassA
DestroyWindow
GetMessageTime
GetAsyncKeyState
SetActiveWindow
PostThreadMessageA
UnhookWindowsHookEx
IsWindow
SetRect
GetSysColorBrush
GetWindowPlacement
IsChild
GetWindow
GetDC
MapDialogRect
EnableWindow
CreateWindowExA
MessageBeep
ScreenToClient
GetClassInfoA
GetPropA
SendDlgItemMessageA
MoveWindow
ClientToScreen
PeekMessageA
SetWindowsHookExA
GetMenuState
IsIconic
GetFocus
TabbedTextOutA
UpdateWindow
CharNextA
GetNextDlgGroupItem
DrawTextExA
ShowWindow
UnregisterClassA
GetWindowLongA
SetTimer
TranslateMessage
IsRectEmpty
RedrawWindow
SetFocus
GetSysColor
OffsetRect

gdi32

SetViewportExtEx
CreatePen
CreateCompatibleDC
CreateFontIndirectA
SetBkMode
GetCurrentPositionEx
PtVisible
GetMapMode
BeginPath
LPtoDP
SelectObject
CreateSolidBrush
RestoreDC
GetClipBox
OffsetViewportOrgEx
DeleteDC
SetTextColor
PathToRegion
StretchBlt
EnumFontFamiliesExA
StrokeAndFillPath
SetViewportOrgEx
SetWindowOrgEx
GetWindowExtEx
SetBkColor
ExtSelectClipRgn
GetObjectA
EndPath
LineTo
GetViewportExtEx
MoveToEx
DPtoLP
SetMapMode
BitBlt
CreateCompatibleBitmap
GetRgnBox
GetTextColor
PolyBezierTo
DeleteObject
Escape
GetBkColor
CreateRectRgnIndirect
ScaleViewportExtEx
SetWindowExtEx
GetStockObject
ScaleWindowExtEx
CreateBitmap
ExtTextOutA
RectVisible
SaveDC
TextOutA
CombineRgn
GetDeviceCaps

comdlg32

GetFileTitleA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegQueryValueA
RegCreateKeyExA

shell32

ShellExecuteA

ole32

CreateILockBytesOnHGlobal
CLSIDFromProgID
CoGetClassObject
OleInitialize
CLSIDFromString
OleIsCurrentClipboard
CoTaskMemFree
OleUninitialize
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoTaskMemAlloc
CoFreeUnusedLibraries
OleFlushClipboard
StgCreateDocfileOnILockBytes

oleaut32

VariantCopy
SysAllocStringLen
SysStringLen
SafeArrayDestroy
SysAllocStringByteLen
VariantTimeToSystemTime
SysAllocString
SysFreeString
SystemTimeToVariantTime
VariantInit
OleCreateFontIndirect
VariantChangeType
VariantClear

comctl32

ord17

shlwapi

PathStripToRootA
PathFindFileNameA
PathIsUNCA
PathFindExtensionA

rpcrt4

UuidCreate

secur32

CompleteAuthToken

oledlg

ord8

Sections

.text
Size: 814KB - Virtual size: 814KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bzz
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

307c9b2b1262b2579ad2512fcd43f469

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

rpcrt4

secur32

oledlg

Sections

.text Size: 814KB - Virtual size: 814KB

.bzz Size: - Virtual size: 44KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 814KB - Virtual size: 814KB

.bzz
Size: - Virtual size: 44KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 3KB