89433ecf9a8f6d5ce9ae0fd7e2ae3cd1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

89433ecf9a8f6d5ce9ae0fd7e2ae3cd1_JaffaCakes118
Size

261KB
MD5

89433ecf9a8f6d5ce9ae0fd7e2ae3cd1
SHA1

69ac0a8ac2de7d223c773b3f5a1a4c3a5aee83f6
SHA256

42d6344d769efa8181f0c4ddb2d0d0d592aeeb3d3236fbcaaa6a3fb8a0776848
SHA512

e2e6e0bcf63084e404e5837bf7b0429a128f20678d62d5aaef9709d42c492da6a378ff69daf230a5ad962b2812ac60c8bcf9dfe25439c31252fe913a0a190c7a
SSDEEP

6144:LQzzPqpQd8BCLA6hQbpmOVB4MubnBKkl61vg:LqjqE8Wgmyubd61v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89433ecf9a8f6d5ce9ae0fd7e2ae3cd1_JaffaCakes118

Files

89433ecf9a8f6d5ce9ae0fd7e2ae3cd1_JaffaCakes118
.dll windows:5 windows x86 arch:x86

53cc206c34c1e15ba4cb70dadc958866

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ddraw.pdb

Imports

msvcrt

qsort
_ftol
_adjust_fdiv
malloc
_initterm
free
memmove
bsearch
_strlwr
wcsrchr
atoi
_except_handler3
_stricmp
floor

ntdll

VerSetConditionMask

user32

RedrawWindow
ChangeDisplaySettingsExA
EnumDisplayDevicesA
wsprintfA
GetClientRect
ClientToScreen
GetWindowThreadProcessId
SetCursor
KillTimer
SendMessageA
IsIconic
CallWindowProcA
GetAsyncKeyState
GetKeyState
SetFocus
DefWindowProcA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
OpenInputDesktop
CloseDesktop
GetLastActivePopup
mouse_event
SetForegroundWindow
GetForegroundWindow
ShowWindow
IsZoomed
SetTimer
ClipCursor
IsWindowVisible
GetSystemMetrics
IsRectEmpty
GetMonitorInfoA
LoadStringA
GetWindowLongA
DestroyWindow
SetWindowLongA
GetClassInfoA
RegisterClassA
CreateWindowExA
SetWindowPos
GetThreadDesktop
GetUserObjectInformationA
SystemParametersInfoA
PostMessageA
ChangeDisplaySettingsA
CopyRect
EnumDisplaySettingsA
IsWindow
ScreenToClient
OffsetRect
SetRect
GetDC
ReleaseDC
IntersectRect
EqualRect

dciman32

DCICreatePrimary
DCIDestroy
DCICloseProvider
DCIEndAccess
DCIOpenProvider
DCIBeginAccess

advapi32

RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
GetSidLengthRequired
GetSidSubAuthority
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryValueExA
RegEnumKeyA
RegCloseKey
RegOpenKeyA
InitializeSid

kernel32

DeleteCriticalSection
LocalReAlloc
OutputDebugStringA
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrcmpA
GetProfileIntA
OpenMutexA
InitializeCriticalSection
CreateMutexA
DisableThreadLibraryCalls
GetCurrentProcess
lstrcatA
WideCharToMultiByte
CreateFileA
MultiByteToWideChar
GetSystemDirectoryA
lstrlenA
ReadFile
SetFilePointer
GetModuleFileNameA
VerifyVersionInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
GetCurrentProcessId
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
GetLastError
GetSystemInfo
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
CloseHandle
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreA
ReleaseMutex
InterlockedExchange
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcmpiA
GetCurrentThreadId
IsBadReadPtr
GetModuleHandleA
IsBadCodePtr
lstrcpyA
lstrcpynA

gdi32

SetBkColor
ExtTextOutA
PatBlt
GdiEntry10
GdiEntry2
GdiEntry4
GetObjectType
AnimatePalette
SetPaletteEntries
SetSystemPaletteUse
CreateCompatibleBitmap
GetDIBits
CreateDIBSection
StretchDIBits
SelectObject
GetSystemPaletteEntries
SetDIBColorTable
BitBlt
GdiEntry7
StretchBlt
GdiEntry8
RestoreDC
DeleteDC
SaveDC
SelectPalette
RealizePalette
GdiEntry5
GetDeviceCaps
CreatePalette
ResizePalette
DeleteObject
GdiEntry13
GdiEntry6
GetRgnBox
GetRandomRgn
CreateRectRgn
GetStockObject
GdiEntry11
GetNearestColor
CreateDCA
GdiEntry3
GdiEntry1
GdiEntry12
GetRegionData
GdiEntry15
GetDeviceGammaRamp
GdiEntry14
CreateCompatibleDC

Exports

Exports

AcquireDDThreadLock
CheckFullscreen
CompleteCreateSysmemSurface
D3DParseUnknownCommand
DDGetAttachedSurfaceLcl
DDInternalLock
DDInternalUnlock
DSoundHelp
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateA
DirectDrawEnumerateExA
DirectDrawEnumerateExW
DirectDrawEnumerateW
DllCanUnloadNow
DllGetClassObject
GetDDSurfaceLocal
GetOLEThunkData
GetSurfaceFromDC
RegisterSpecialCase
ReleaseDDThreadLock

Sections

.text
Size: 237KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text8
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

53cc206c34c1e15ba4cb70dadc958866

Headers

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

user32

dciman32

advapi32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 237KB - Virtual size: 240KB

.data Size: 6KB - Virtual size: 28KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 13KB - Virtual size: 16KB

.text8 Size: 2KB - Virtual size: 4KB

.text
Size: 237KB - Virtual size: 240KB

.data
Size: 6KB - Virtual size: 28KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 13KB - Virtual size: 16KB

.text8
Size: 2KB - Virtual size: 4KB