68c1c0050b0f7a3b804b5c60b92f8e9c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

68c1c0050b0f7a3b804b5c60b92f8e9c_JaffaCakes118
Size

216KB
MD5

68c1c0050b0f7a3b804b5c60b92f8e9c
SHA1

1693947763fbbe18c44577617149452c26fe902b
SHA256

97c17bcd7c5778e4cffcfb134f842698be9efc6ec65e78a3c506cc16312aca49
SHA512

7597cd74710cc08ca024c08b204942b54dd09267804b1c00685dc15b494e2e023763a8bd76703f14196bde1b1e8b2cf53c1a4ee6d607b590411418de4164de25
SSDEEP

6144:2jXu4ZEZJeaWTH7fLS0OzVH0hSpkVEKud:m+4aZsa0HvuzOgkVid

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68c1c0050b0f7a3b804b5c60b92f8e9c_JaffaCakes118

Files

68c1c0050b0f7a3b804b5c60b92f8e9c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

352b444fdfedbe44980591c3b2142bf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetVersion
GlobalReAlloc
lstrcmpA
GetModuleFileNameW
GetTickCount
DeleteFileA
_llseek
_lread
WriteFile
_lclose
GetModuleHandleW
ResumeThread
CreateThread
CreateEventA
TerminateThread
CloseHandle
GetPrivateProfileIntA
FreeResource
LockResource
LoadResource
FindResourceA
LoadLibraryW
OutputDebugStringA
GetProcAddress
GetLastError
GetModuleHandleA
ResetEvent
SetLastError
WaitForSingleObject
GlobalUnlock
SetEvent
GlobalHandle
GlobalLock
GlobalAlloc
GlobalSize
lstrlenA
GlobalFree
GetSystemInfo

user32

GetDlgCtrlID
GetSystemMetrics
FrameRect
GetWindowRect
SetCapture
InflateRect
GetSysColor
GetSysColorBrush
IsWindowEnabled
DefWindowProcA
PeekMessageA
FillRect
GetQueueStatus
TranslateMessage
SetDlgItemTextA
GetDlgItemTextA
SendDlgItemMessageA
MessageBeep
GetWindowTextA
SetFocus
GetDlgItem
SetWindowPos
GetDesktopWindow
ClientToScreen
IsWindow
DispatchMessageA
ScreenToClient
MessageBoxA
GetActiveWindow
EndDialog
DialogBoxIndirectParamA
GetDialogBaseUnits
DrawTextA
DrawFocusRect
LoadStringA
ReleaseCapture
BeginPaint
GetDC
EndPaint
ReleaseDC
UnregisterClassA
InvalidateRect
UpdateWindow
RegisterClassA
SetRect
GetClientRect
GetWindowLongA
SetPropA
RemovePropA
GetPropA
LoadCursorA
RegisterWindowMessageA
GetAsyncKeyState
SendMessageA
MoveWindow
IntersectRect
GetCursorPos
GetParent

gdi32

DeleteObject
BitBlt
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
LineTo
MoveToEx
GetStockObject
CreatePen
ExtTextOutA
CreateSolidBrush
SetBkMode
RoundRect
SetBkColor
SetTextColor

msvcrt

strtol
_ltoa
rand
_except_handler3
strncpy

Exports

Exports

AboutDlgProc
AllocPointer
AllocSlider
AngleFromSlope
BlockMove
BlockMoveData
BufferedDraw
CalcProxyRect
CalcProxyRectCore
CenterWindow
CentreDialog
CheckProxiesSupported
DefPaintBack
DefPlotThumb
DeinitializePIExpressDialogs
DisposPtr
DisposeHandle
DisposePtr
DoYield
DragThumb
DrawSmallButton
DrawTheSmallButton
DrawTicksBack
DupHandle
EditFail
EmptyRect
FSClose
FSRead
FSWrite
FSpCreate
FSpDelete
FSpOpenDF
Fix2Frac
Fix2Long
Fix2X
FixATan2
FixDiv
FixHypot
FixMul
FixRatio
FixRound
FixSqrt
Frac2Fix
Frac2X
FracCos
FracDiv
FracHypot
FracMul
FracSin
FracSqrt
FreePointer
FreeSlider
GetDlgItemRect
GetEOF
GetFPos
GetHandleSize
GetIndString
GetIndStringPreferred
GetSliderPos
GetSliderRange
GetThumbRect
HLock
HUnlock
HandFromPtr
HostAddPIResource
HostAllocateBuffer
HostAllocateStripBuffer
HostBufferProcsAvailable
HostBufferSpace
HostCountPIResources
HostDeletePIResource
HostDisposeHandle
HostFreeBuffer
HostGetHandleSize
HostGetPIResource
HostHandleProcsAvailable
HostLockBuffer
HostLockHandle
HostNewHandle
HostResourceProcsAvailable
HostSetHandleSize
HostUnlockBuffer
HostUnlockHandle
Hypot
InitCursor
InitEditWnd
InitHypotTable
InitializePIExpressDialogs
Interpolate1D
Interpolate1DMulti
Interpolate2D
Interpolate2DMulti
InvalThumbRect
LockSliderData
Long2Fix
Long2X
LongHypot
LongMul
LongSqrt
MacToWinRect
MapRect
MemError
MoveHHi
NewCalcProxyRect
NewHandle
NewHandleClear
NewPtr
NewPtrClear
Num2Comp
NumToString
OutputMessage
PIDMDisposeDialog
PIDMExpressHandleDialog
PIDMExpressResDialog
PIDMGetControl
PIDMGetControlIndex
PIDMGetMacDialog
PIDMModalDialog
PIDMNewHandleDialog
PIDMNewResDialog
PIDMWinExpressDialog
PIExpressDialogsAvailable
PIInsetRect
PIOffsetRect
PIPtInRect
PIQuickZResToCString
PIQuickZResToPascalString
PIQuickZToCString
PIQuickZToCStringLen
PIQuickZToPascalString
PIQuickZToPascalStringLen
PISetRect
PIThreadsDoAll
PIThreadsEndThreads
PIThreadsGetNumThreads
PIThreadsGetParamsPtr
PIThreadsInit
PIThreadsStart1
PIThreadsWaitForCompletion
PIZGetIndString
PIZGetIndStringPreferred
PIZLoadString
PIZNoteAlert
PIZStopAlert
PIZToUnicodeCString
PackBits
PaintSlider
ParamText
Random
RegisterSlider
SectRect
SetFPos
SetHandleSize
SetSliderData
SetSliderFlags
SetSliderMax
SetSliderMin
SetSliderPos
SetSliderProc
SetSliderRange
SetSliderThumbOff
SetSliderThumbSize
ShortHypot
ShortMul
ShowAlert
ShowOutputBuffer
SliderWndProc
SlopeFromAngle
SnapToLogPos
TickCount
TranslatePos
TruncateFileName
UnRegisterSlider
UnlockSliderData
UnpackBits
UserChangedEditText
UserInputAvail
UtilReadDescriptors
UtilReadPlatformFilePathDescriptor
UtilReadPointDescriptor
UtilReadPointListDescriptor
UtilWriteDescriptors
UtilWriteNoDescForceUI
UtilWritePlatformFilePathDescriptor
UtilWritePointDescriptor
UtilWritePointListDescriptor
ValidateDlgLong
WAllocBuffer
WFreeBuffer
WSizeBuffer
WarnHostAdvanceStateAvailable
WarnHostBufferProcsAvailable
WarnHostHandleProcsAvailable
WarnHostResourceProcsAvailable
WinToMacRect
X2Fix
X2Frac
X2Long
map_one
map_to_logical
map_to_physical

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

352b444fdfedbe44980591c3b2142bf5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 168KB - Virtual size: 164KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 168KB - Virtual size: 164KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 1KB