751b52f8eaff13889bda217754a8121a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

751b52f8eaff13889bda217754a8121a_JaffaCakes118
Size

772KB
MD5

751b52f8eaff13889bda217754a8121a
SHA1

53f91ac124e76c4d3a7b18e041b3f7f57c49cc9f
SHA256

6a5fe2a9f2d25a11739bbab9ab58e32752445565d4fe17f5b79085f6f0c26046
SHA512

6ff61a5bc6659ae06ddd74b30136cc6908b61be1c425a0ee5e005d8f39b9ac306e9f68ab67858c895d0a3fbbdf419bd761e0b6c963c9bf9b428c917916dd762b
SSDEEP

12288:6IUaUI8oXQ6fVN2NxmfuvcjToNei+6HL1Jf+:64UOgyN2NxmW5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
751b52f8eaff13889bda217754a8121a_JaffaCakes118

Files

751b52f8eaff13889bda217754a8121a_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

e088187ed9912de6105facc7b7dcd80b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
UrlEscapeA
PathFileExistsA
StrToIntA

iphlpapi

GetAdaptersInfo

wininet

InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable
InternetOpenUrlA
InternetOpenA

kernel32

GetCurrentProcessId
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
WritePrivateProfileStringA
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
GetProcessHeap
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetTimeZoneInformation
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetModuleFileNameW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalAlloc
FormatMessageA
MulDiv
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
lstrcmpW
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
CompareStringA
CompareStringW
GetVersion
InterlockedExchange
FreeResource
CreateThread
lstrcpyW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
IsDBCSLeadByte
lstrcmpiA
LoadLibraryExA
RaiseException
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
CreateProcessA
WaitForSingleObject
GetTickCount
GetVersionExA
DeleteFileA
CloseHandle
GetTempPathA
GetTempFileNameA
GetLastError
GetSystemDirectoryA
LoadLibraryA
FreeLibrary
lstrlenA
MultiByteToWideChar
lstrlenW
GetModuleFileNameA
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
Sleep
VirtualAlloc

user32

GetSysColorBrush
UnregisterClassA
GetWindowThreadProcessId
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
GetClassInfoExA
PtInRect
SetTimer
GetWindowRect
PostMessageA
KillTimer
EnableWindow
GetDlgCtrlID
CallWindowProcA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
AdjustWindowRectEx
GetSysColor
RedrawWindow
UpdateWindow
InvalidateRect
SetCursor
LoadCursorA
CharNextA
DispatchMessageA
PeekMessageA
ShowWindow
DestroyWindow
IsWindow
GetClientRect
GetWindow
GetFocus
SendMessageA
LoadBitmapA
DefWindowProcA
GetWindowLongA
CharUpperA
GetClassNameA
EnumChildWindows
EnumWindows
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
GetClassInfoA
RegisterClassA
CreateWindowExA
CopyRect
BeginPaint
EndPaint
SetWindowLongA

gdi32

GetMapMode
DeleteDC
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
DeleteObject
CreateSolidBrush
GetStockObject
GetObjectA
CreateFontIndirectA
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SetMapMode
SetBkMode
RestoreDC
SaveDC

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueA

shell32

ShellExecuteExA
ShellExecuteA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoCreateGuid
StringFromCLSID
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CLSIDFromString

oleaut32

SysFreeString
VarUI4FromStr
UnRegisterTypeLi
SysAllocString
LoadTypeLi
SysStringLen
VariantClear
VariantInit
VariantCopy
VariantChangeType
OleLoadPicture

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KeyAndSubKeyDeleteOne
KeyAndSubKeyDeleteTwo
_CFS

Sections

.text
Size: 300KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e088187ed9912de6105facc7b7dcd80b

Headers

File Characteristics

Imports

shlwapi

iphlpapi

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 300KB - Virtual size: 296KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 368KB - Virtual size: 365KB

.reloc Size: 36KB - Virtual size: 35KB

.text
Size: 300KB - Virtual size: 296KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 368KB - Virtual size: 365KB

.reloc
Size: 36KB - Virtual size: 35KB