70ec250a21d3d48c6ce289aba521126c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

70ec250a21d3d48c6ce289aba521126c_JaffaCakes118
Size

140KB
MD5

70ec250a21d3d48c6ce289aba521126c
SHA1

5b0766be7f7243190bb178f40f81c16deb357e68
SHA256

fb98cfb284391c7d496e28c1f521e0014efdd93ff5407efa8371f90868fbdfab
SHA512

303acb5a95703c4d3a53d9fbeb8084963537e55f5f7168a7f09e89cd37b5a45ec8b9f99cc8c814d7492ed3ebc208abf76625e04bb3e4a9c72198570162c5c148
SSDEEP

3072:trYWEVej+a6b9eOY2HExlhEft4z9HrulfLgDIiTqZ+Wxq5Iox99z:trYW5Sa6bVY2kxLXha0DxTqZ+Wg5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70ec250a21d3d48c6ce289aba521126c_JaffaCakes118

Files

70ec250a21d3d48c6ce289aba521126c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

165944f2c5ada948c5ae80caed15f7d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\ihhyycPch\mlvhYyktixhkmg\ucqOHbxKumr\vEzIuwbvEbse.pdb

Imports

gdi32

SetViewportExtEx
CreatePen
GetBkMode
SetTextAlign
RestoreDC
ScaleWindowExtEx
CreatePenIndirect
SetWindowExtEx
PathToRegion
GetLayout
CreateSolidBrush
SaveDC
GetTextExtentPointW
OffsetRgn
DPtoLP
CreateBrushIndirect
SelectObject
CreateCompatibleDC
SetBitmapDimensionEx
OffsetViewportOrgEx
BitBlt
SetBkMode
ExtFloodFill
GetTextMetricsW
SetRectRgn
PtVisible
SetBitmapBits
SelectPalette
SetBrushOrgEx
AddFontResourceW
SetLayout
GetDIBColorTable
CreateEllipticRgnIndirect
GetCharWidth32W
RectVisible
TextOutA
CreateHatchBrush
CreatePalette
MoveToEx
EnumFontFamiliesExW
CreateDCW
Rectangle
GetTextAlign
SetTextColor
SetROP2
GetStockObject
SetMapMode
Polygon

user32

CharNextA
CreateDialogParamW
ReplyMessage
MapVirtualKeyExW
GetKeyboardType
DestroyCaret
FindWindowExA
InsertMenuA
GetNextDlgTabItem
MonitorFromPoint
IsCharUpperA
ScrollWindow
SetUserObjectInformationW
RegisterClassExW
GetMenuStringA
CharNextExA
ShowWindowAsync
CreateDialogIndirectParamW
ClientToScreen
CreateDialogParamA
RemovePropW
GetWindowTextW
IsWindow
SetWindowTextW
GetMessageTime
IsZoomed
DestroyMenu
ChildWindowFromPointEx
VkKeyScanW
DialogBoxIndirectParamW
CreateCaret
RemoveMenu
LoadMenuA
RegisterHotKey
GetClassInfoExW
DrawStateW
CharUpperBuffA
IsCharAlphaNumericW
GetDlgItemTextA
GetSystemMetrics
DrawMenuBar
SendDlgItemMessageA
wvsprintfW
DrawEdge
InsertMenuW
EndDialog
GetMenuItemInfoW
CheckDlgButton
DialogBoxParamA
GrayStringW
ExitWindowsEx
GetSubMenu
SetMenuDefaultItem
DialogBoxIndirectParamA
PtInRect
EnableScrollBar
GetKeyState
SetCursorPos
CopyAcceleratorTableW
WindowFromPoint
IsCharAlphaW
SendNotifyMessageW
SetWindowLongA
GetMessagePos
DefFrameProcW
GetDlgItemInt
DrawTextExW
LoadBitmapW
MapWindowPoints
EnumChildWindows
RegisterClassW
DefWindowProcA
EnableWindow
InsertMenuItemW
TranslateAcceleratorW
MapVirtualKeyA
GetUpdateRgn
GetWindowTextA
TranslateMessage
SetWindowLongW
CharToOemBuffA
LoadAcceleratorsA
GetClassLongA
DefFrameProcA
GetSysColorBrush
wvsprintfA
OemToCharA
AttachThreadInput
SetMenuItemInfoW
SetRectEmpty
GetLastActivePopup
CharUpperA
GetWindowTextLengthW
EndPaint
InvalidateRgn
RegisterClassExA
SetWindowRgn
IsDlgButtonChecked
ActivateKeyboardLayout
SetFocus
SetForegroundWindow
SetCaretPos
GetClassNameW
AppendMenuW
DrawAnimatedRects
InvalidateRect
SetDlgItemInt
InflateRect
GetClientRect
MapVirtualKeyW
SetWindowPlacement
CheckMenuItem
DefDlgProcA
GetDlgItem

ole32

CoInitialize
CoUninitialize

kernel32

MoveFileExA
FileTimeToLocalFileTime
SetHandleCount
SetThreadLocale
GetNumberFormatA
FindResourceW
MapViewOfFile
FileTimeToSystemTime
GetComputerNameExW
FindClose
AreFileApisANSI
FormatMessageA
SetLastError
FindNextFileW
GlobalGetAtomNameA
SearchPathA
ResumeThread
IsBadCodePtr
GetUserDefaultLCID
GetModuleFileNameW
GlobalCompact
ReadFile
SleepEx
GetTimeFormatA
GetFullPathNameA
CreateFileW
LoadResource
EnumResourceTypesA
EnumResourceNamesW
GetLocaleInfoA
ConvertDefaultLocale
GetCPInfo
FindFirstFileA
RaiseException
FlushViewOfFile
SetCommMask
SearchPathW
SetSystemTime
GetCommState
SetWaitableTimer
SetTimerQueueTimer
GetVersionExA
LocalFree
SetFileTime
FindNextChangeNotification
TryEnterCriticalSection
GetModuleFileNameA
InitializeCriticalSection
CreateSemaphoreA
GetTempPathW
GetThreadLocale
SetCommBreak

msvcrt

mbtowc
mktime
strspn
_controlfp
isprint
time
wcstoul
__set_app_type
malloc
__p__fmode
vsprintf
free
gets
puts
__p__commode
isdigit
qsort
mbstowcs
_amsg_exit
fprintf
wcslen
fputc
isalnum
wcscmp
strncpy
_initterm
isxdigit
floor
setlocale
towlower
_acmdln
exit
strerror
wcsrchr
fread
fwrite
_ismbblead
wcsncmp
iswalpha
_XcptFilter
tolower
_exit
_cexit
__setusermatherr
localtime
__getmainargs
wcstod

Exports

Exports

?CopyRectDFIUioud@@YGKPA_WK@Z
?CopyRectIDoiuIODd@@YGKPA_WK@Z
?CopyRectIUDUiiud@@YGKPA_WK@Z
?CopyRectIUDiujdLJDUY@@YGKPA_WK@Z
?CopyRectJKDudjKu@@YGKPA_WK@Z
?CopyRectUDSuiduiJKDhj@@YGKPA_WK@Z
?CopyRectUIDUIdKJH@@YGKPA_WK@Z

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 401B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.strs
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bts2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bts1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bts0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

165944f2c5ada948c5ae80caed15f7d2

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

ole32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 101KB - Virtual size: 100KB

.edata Size: 512B - Virtual size: 401B

.strs Size: 5KB - Virtual size: 8KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 11KB - Virtual size: 35KB

.bts2 Size: 2KB - Virtual size: 1KB

.bts1 Size: 2KB - Virtual size: 1KB

.bts0 Size: 2KB - Virtual size: 1KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 101KB - Virtual size: 100KB

.edata
Size: 512B - Virtual size: 401B

.strs
Size: 5KB - Virtual size: 8KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 11KB - Virtual size: 35KB

.bts2
Size: 2KB - Virtual size: 1KB

.bts1
Size: 2KB - Virtual size: 1KB

.bts0
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 2KB - Virtual size: 1KB