7710b5db865382fdc85741b13fed019c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7710b5db865382fdc85741b13fed019c_JaffaCakes118
Size

248KB
MD5

7710b5db865382fdc85741b13fed019c
SHA1

c02f5f01f55fb9e52516f24df23d711cc552523a
SHA256

2f2ce176f91f231d851f1ad68d12e1b56794c925662e8e3343f4ee378f792801
SHA512

3cd70934b7d678d4d355f48815802ac3305b576fb29cc415e9cb5a65856cd5b6b0f20b1de0703598e4812fa6f277fdf7f0d86e68f7e37bd1e7dfb141f425ec39
SSDEEP

6144:6AjB35JB33DfYrs7PWgZ9juM7bAa3MXEqniEBSFf:p3JpjHrvukbAa3JqFgF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7710b5db865382fdc85741b13fed019c_JaffaCakes118

Files

7710b5db865382fdc85741b13fed019c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b0718a63109956f730fa909cd164af79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

GetTokenInformation
LookupPrivilegeNameA
OpenProcessToken
OpenThreadToken
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegQueryValueExA
RegSetValueExA

gdi32

CreateBitmap
DeleteDC
DeleteObject
Escape
ExtTextOutA
GetClipBox
GetDeviceCaps
GetStockObject
OffsetViewportOrgEx
PtVisible
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectObject
SetBkColor
SetMapMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutA

user32

SetWindowLongA
SetPropA
SetMenuItemBitmaps
SetForegroundWindow
SetCursor
SendMessageA
RemovePropA
ReleaseDC
RegisterWindowMessageA
RegisterClassA
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
ModifyMenuA
MessageBoxA
MapWindowPoints
LoadIconA
LoadCursorA
LoadBitmapA
IsWindowVisible
IsWindowEnabled
IsWindow
IsIconic
GrayStringA
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindow
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropA
GetParent
ShowWindow
GetMessagePos
SetWindowPos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDC
GetCursorPos
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoExA
GetClassInfoA
GetCapture
GetActiveWindow
EnableWindow
EnableMenuItem
DrawTextExA
DrawTextA
DispatchMessageA
DestroyWindow
DestroyMenu
DefWindowProcA
CreateWindowExA
CopyRect
ClientToScreen
CheckMenuItem
CharUpperA
CallWindowProcA
CallNextHookEx
AdjustWindowRectEx
SystemParametersInfoA
TabbedTextOutA
TranslateMessage
UnhookWindowsHookEx
SetWindowTextA
GetMessageA
SetWindowsHookExA
UnregisterClassA
ValidateRect
WinHelpA
GetMessageTime

oleaut32

VariantClear
VariantChangeType
VariantInit

kernel32

lstrlenA
lstrcmpW
lstrcmpA
lstrcatA
WritePrivateProfileStringA
WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetHandleCount
SetFilePointer
SetErrorMode
RtlUnwind
ReadFile
RaiseException
QueryPerformanceCounter
MultiByteToWideChar
LockResource
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
IsDebuggerPresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameA
GlobalFree
GlobalFlags
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetFileType
GetFileSize
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
CloseHandle
CompareStringA
ConvertDefaultLocale
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
EnumResourceLanguagesA
ExitProcess
FindResourceA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetConsoleOutputCP

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

shlwapi

PathFindExtensionA
PathFindFileNameA

setupapi

SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
CM_Get_DevNode_Status_Ex
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInterfaces

Exports

Exports

AudioGetFormatInfo
BAOCloseHandle
CopyStrmPrmToRawObj
CreateBlockAccessFromImage
DVDPRVRRestoreVideoRecording
EnumMCCustomItemDataRelease
GLMapBufferObject
GLRegisterBufferObject
GetBaseImageDataPropertyCount
GetDriveModeCount
GetVMSInfo
IsSupportParamItem
MallocArray
Memcpy3D
OpenDevice
RegisterDriveChangeCallback
WGLGetDevice

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0718a63109956f730fa909cd164af79

Headers

File Characteristics

Imports

advapi32

gdi32

user32

oleaut32

kernel32

winspool.drv

shlwapi

setupapi

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 140KB

.data Size: 96KB - Virtual size: 140KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 140KB - Virtual size: 140KB

.data
Size: 96KB - Virtual size: 140KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB