74dc14f9270b21188148333314655fa6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

74dc14f9270b21188148333314655fa6_JaffaCakes118
Size

576KB
MD5

74dc14f9270b21188148333314655fa6
SHA1

35107d06095659b5599626cf6d828b74f7ad2817
SHA256

007d7e51ec8459505390b54511be226beae8c97b520c0bc72ff34b33d9fe87b4
SHA512

86f647ffb82b68b0ef05db048390a2e486ca197f9febc52810ee36aba969a3ce8125781cca1091dd3aefedf88a095587020cf4ccfaa414c724566412e11e45b5
SSDEEP

12288:/YnfkxKJINxEkPnCKPiRy/O2/zpZsYfnAM4z:/gfkUJIMUwy/O2/1Zsy2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74dc14f9270b21188148333314655fa6_JaffaCakes118

Files

74dc14f9270b21188148333314655fa6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9c1a1c1d0a80452e81554028f17f35c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

x:\Projects\ProductwiseToolbar\Sources\VS_Projects\FireFox\SmileyCore\SmileyCore\Release\bin\SmileyCore.pdb

Imports

kernel32

TerminateThread
CreateEventW
DeleteFileA
GetModuleHandleW
Sleep
GlobalAlloc
GetLastError
GlobalSize
GlobalLock
GlobalUnlock
WideCharToMultiByte
OutputDebugStringW
DebugBreak
lstrlenA
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetThreadLocale
IsProcessorFeaturePresent
InterlockedCompareExchange
CreatePipe
CreateProcessA
SetHandleInformation
GetLocalTime
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetEnvironmentVariableA
GetOverlappedResult
GetThreadTimes
GetSystemTimeAdjustment
GetProcessTimes
GetWindowsDirectoryA
GlobalMemoryStatus
SetConsoleMode
FindNextFileA
FindFirstFileA
CreateEventA
SetEvent
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetVersionExA
HeapFree
GetProcessHeap
FormatMessageW
OutputDebugStringA
GetTickCount
GetVersion
CreateProcessW
GetSystemTime
GetModuleHandleA
GetFileAttributesW
GetVersionExW
SetLastError
GlobalFree
LoadLibraryW
CreateDirectoryW
GetProcAddress
CloseHandle
FreeLibrary
LoadLibraryA
GetModuleFileNameW
GetCurrentProcess
FindClose
FlushInstructionCache
GetCurrentThreadId
CreateThread
ReleaseMutex
WaitForSingleObject
CreateMutexW
HeapAlloc
CreateFileW
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteConsoleW
GetFileType
GetStdHandle
GetCommandLineA
LCMapStringA
LCMapStringW
GetCPInfo
ExitProcess
HeapReAlloc
GetSystemTimeAsFileTime
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
GetACP
GetOEMCP
IsValidCodePage
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
WriteFile
GetModuleFileNameA
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetTimeZoneInformation
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
CreateFileA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
MultiByteToWideChar

user32

GetSystemMetrics
SetWindowLongW
IsWindow
GetWindowLongW
PostMessageW
GetWindow
GetClipboardOwner
SetWindowTextW
GetForegroundWindow
GetCapture
GetQueueStatus
FindWindowA
SendMessageA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClipboardFormatW
SystemParametersInfoW
MapWindowPoints
KillTimer
SetTimer
SetForegroundWindow
SendMessageW
GetFocus
MessageBoxW
FindWindowW
GetParent
UnregisterClassA
CharNextW
wvsprintfW
EndPaint
BeginPaint
GetDC
ScreenToClient
LoadImageW
EnableWindow
GetClassInfoW
RegisterClassW
GetClientRect
CreateWindowExW
GetDesktopWindow
DefWindowProcW
EnumClipboardFormats
GetClipboardFormatNameW
GetClipboardData
DialogBoxParamW
LoadCursorW
SetCursor
EndDialog
GetDlgItem
GetActiveWindow
LoadStringW
SetWindowPos
GetWindowRect
GetCursorPos

gdi32

StretchBlt
DPtoLP
DeleteDC
BitBlt
CreateBitmap
SelectObject
GetObjectW
CreateCompatibleDC
DeleteEnhMetaFile
DeleteObject
CopyEnhMetaFileW
GetStockObject
TextOutW
SetTextColor
SetBkColor
CreateFontW
GetBkColor
GetTextColor
CreateSolidBrush
CreateCompatibleBitmap
SetMapMode
GetMapMode

shell32

SHGetFolderPathW
ShellExecuteW

ole32

OleRun
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

GetErrorInfo
SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantInit
VariantChangeType
VariantClear
SysAllocString

xpcom

NS_StringContainerFinish
NS_CStringContainerInit
NS_CStringContainerFinish
NS_GetServiceManager
NS_StringContainerInit2
NS_StringContainerInit
NS_Free
NS_Alloc
NS_CStringGetData
NS_StringSetData
NS_StringGetData

nspr4

PR_AtomicIncrement
PR_AtomicDecrement

plc4

PL_strdup

urlmon

URLDownloadToCacheFileW
URLDownloadToFileW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

iphlpapi

GetAdaptersInfo

advapi32

CryptEncrypt
RegCreateKeyW
RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegSetValueExW
CryptDestroyKey
CryptGetKeyParam
CryptDecrypt
CryptReleaseContext
CryptDeriveKey
CryptDestroyHash
CryptHashData
CryptAcquireContextW
CryptCreateHash
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

NSGetModule

Sections

.text
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c1a1c1d0a80452e81554028f17f35c8

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

xpcom

nspr4

plc4

urlmon

version

iphlpapi

advapi32

Exports

Exports

Sections

.text Size: 388KB - Virtual size: 388KB

.rdata Size: 112KB - Virtual size: 110KB

.data Size: 8KB - Virtual size: 37KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 40KB - Virtual size: 38KB

.text
Size: 388KB - Virtual size: 388KB

.rdata
Size: 112KB - Virtual size: 110KB

.data
Size: 8KB - Virtual size: 37KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 40KB - Virtual size: 38KB