653f0a76f4a8aeab529a242986ae6257_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

653f0a76f4a8aeab529a242986ae6257_JaffaCakes118
Size

812KB
MD5

653f0a76f4a8aeab529a242986ae6257
SHA1

dab1b8df0a6b7718fe613acebf40ec6f7d910d03
SHA256

1c5a20ae25f0122f084eb1716fcbf434e24ab46f9e863e975b6a114fcaecb799
SHA512

bb438cc034b29c81a6d2db7566a7ebba610db27c6d0847f000f718a75a2ca22dd67eaa417a123e6aebf5422f9b92d0bc6e75f056a8d9a9d78f62964c2013272e
SSDEEP

12288:JLH996GD8kejNC5hwhCt6WxONzJ9wGJxuUi:JHnv8lEONw+xut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
653f0a76f4a8aeab529a242986ae6257_JaffaCakes118

Files

653f0a76f4a8aeab529a242986ae6257_JaffaCakes118
.dll windows:4 windows x86 arch:x86

69dcda51699fe99762c4ba5b5c51b975

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetLastError
WriteFile
CreateProcessA
GetLocalTime
lstrcmpiA
LockResource
LoadResource
SizeofResource
FindResourceA
Sleep
CreateEventA
lstrlenA
lstrcmpA
ResetEvent
WaitForSingleObject
SetThreadPriority
CreateFileA
SetEvent
lstrcpyA
GlobalAlloc
GlobalFree
SetLastError
FlushFileBuffers
RaiseException
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
GetCPInfo
VirtualAlloc
SetFilePointer
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RtlUnwind
UnhandledExceptionFilter
TlsGetValue
GetProcAddress
TlsFree
TlsAlloc
HeapFree
HeapSize
HeapAlloc
HeapReAlloc
GetCurrentProcess
TerminateProcess
CloseHandle
ExitProcess
GetFileSize
GetModuleHandleA
ExitThread
GetVersion
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
TlsSetValue
GetCurrentThreadId
CreateThread
ReadFile

user32

WinHelpA
InvalidateRect
PostMessageA
SendMessageA
DialogBoxParamA
GetActiveWindow
SetDlgItemTextA
GetDlgItemTextA
IsDlgButtonChecked
EndDialog
SetClassLongA
EndPaint
DrawIcon
LoadIconA
DestroyWindow
CreateDialogParamA
GetWindowLongA
SetWindowLongA
GetWindowPlacement
GetSystemMetrics
LoadStringA
SetWindowPos
GetWindowRect
ScreenToClient
IntersectRect
GetSysColor
CheckDlgButton
MessageBeep
GetDlgItemInt
CheckRadioButton
SetDlgItemInt
LoadBitmapA
DrawEdge
MessageBoxA
SetWindowTextA
GetUpdateRect
GetDC
GetClientRect
FillRect
ReleaseDC
GetDlgItem
SendDlgItemMessageA
DdeCreateDataHandle
DdeClientTransaction
DdeInitializeA
DdeCreateStringHandleA
DdeFreeStringHandle
DdeConnect
DdeDisconnect
DdeUninitialize
DdeAccessData
DdeUnaccessData
DdeFreeDataHandle
wsprintfA
BeginPaint

gdi32

SetBkColor
DeleteObject
DeleteDC
CreateSolidBrush
SelectObject
GetObjectA
StretchBlt
CreatePen
TextOutA
CreateCompatibleDC
MoveToEx
SetTextAlign
LineTo
GetStockObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

supercom

ComReset
ComPortPresent
ComValid
ComInit
ComSetState
ComSetBufSize
ComEnableFIFO
ComBufClear
ComBufCount
ComRead
ComWrite
ComDisableFIFO

ddraw

DirectDrawCreate

Exports

Exports

AboutInterfaceDialog
AdjCol
AdjColChar
AdjRow
AdjRowChar
AdjSendedNumbers
AdjSendedWhat
AdjTopicString
CMUFileOpen
CMUFileSave
CheckAmbientHit
ClearSheet
ConnectDde
CountRowsColumns
DdeExecute
DisConnectDde
DisableWindow
EepromWrite16
Gdn2Str
GetUtilVersion
Input
InputName
InputNumber
Intersect
LABtoRGB
LoadFile
MergeColumns
MySetDialogFontSize
PositionWindow
PrevSheet
SPC_WhiteXYZ
SendData
SendDde
SetDlgItemDate
SetupTopic
SpU_CenterWindow
SpU_DisableDlgItem
SpU_DlgPrintf
SpU_Error
SpU_GetItemRect
SpU_GetResString
SpU_InvalidateDlgItem
SpU_PositionWindowOnDlg
SpU_SaveWindowPosition
SpU_SetupComPort
SpU_SetupComPortW
SpU_hdcPrintf
SpU_validate_winpos
Spectrocam_2nmInterpolation
Spectrocam_CalcGamma
Spectrocam_CalcMatrix
Spectrocam_CalculateDensity
Spectrocam_CalculateDensityBand
Spectrocam_CalculateRawSpectrum
Spectrocam_Calculate_CIE
Spectrocam_ColorDlg
Spectrocam_ColorTemperature
Spectrocam_ColorTemperatureDlg
Spectrocam_CompareWhite
Spectrocam_ContinueAfterWhiteDlg
Spectrocam_ContinuousRunning
Spectrocam_ControlRunning
Spectrocam_DeltaLAB
Spectrocam_DeltaLUV
Spectrocam_DiagnoseDlg
Spectrocam_DrawLibBMP
Spectrocam_Error
Spectrocam_ErrorString
Spectrocam_ErrorlString
Spectrocam_ExecuteRequest
Spectrocam_Exit
Spectrocam_GetByteTable
Spectrocam_GetCheckDark
Spectrocam_GetCheckWhite
Spectrocam_GetDoubleTable
Spectrocam_GetIlluminant
Spectrocam_GetInfo
Spectrocam_GetIntTable
Spectrocam_GetLastDeltaE
Spectrocam_GetLastError
Spectrocam_GetLastWhite
Spectrocam_GetLastWhiteTemp
Spectrocam_GetObserver
Spectrocam_GetRomWhite
Spectrocam_GetTable
Spectrocam_GetThreadState
Spectrocam_GetTileValue
Spectrocam_GetWeightTable
Spectrocam_GetWhiteCheckedDate
Spectrocam_IT2mSec
Spectrocam_Init
Spectrocam_Initialize
Spectrocam_MainDlg
Spectrocam_MeasureCCDDarkLevels
Spectrocam_MeasureDiffusorCorrection
Spectrocam_MeasureDlg
Spectrocam_MonitorDlg
Spectrocam_NextIT
Spectrocam_Open_Device
Spectrocam_Open_Serial
Spectrocam_ReplaceDevName
Spectrocam_Reset
Spectrocam_SendRequest
Spectrocam_SetAsDarkLevel
Spectrocam_SetCheckDark
Spectrocam_SetCheckWhite
Spectrocam_SetIlluminantObserver
Spectrocam_SetLanguage
Spectrocam_SetLastDeltaE
Spectrocam_SetLastWhiteTemp
Spectrocam_SetRGBIlluminant
Spectrocam_SetRGBxyz
Spectrocam_SetWhiteCheckedDate
Spectrocam_StartControl
Spectrocam_StopControl
Spectrocam_WaitClose
Spectrocam_WaitFlash
Spectrocam_WaitOpen
Spectrocam_WaitPrint
Spectrocam_WhiteDlg
Spectrocam_WhiteNeeded
Spectrocam_XYZ2Lab
Spectrocam_XYZ2Luv
Spectrocam_XYZ2RGB
Spectrocam_XYZ2xyuv
Spectrocam_YxyToXYZ
Spectrocam_mSec2IT
Spectrocam_mSec2MeasureCnt
TestSheet
Today2Gdn
VisibleDlgItem
Wait
XlColToStr
XlColumnNr

Sections

.text
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 628KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69dcda51699fe99762c4ba5b5c51b975

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

supercom

ddraw

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 125KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 24KB - Virtual size: 162KB

.rsrc Size: 628KB - Virtual size: 624KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 128KB - Virtual size: 125KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 24KB - Virtual size: 162KB

.rsrc
Size: 628KB - Virtual size: 624KB

.reloc
Size: 16KB - Virtual size: 15KB