8b0d1a0ad0873849ef6fba03819b2703_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8b0d1a0ad0873849ef6fba03819b2703_JaffaCakes118
Size

224KB
MD5

8b0d1a0ad0873849ef6fba03819b2703
SHA1

07fe5c8b10a6f41b909d21d40c3890cd5141d402
SHA256

016d9a117bb67eb80e201e43fe28e75127bd64cb4a6c71b9b928d2f7b93451c1
SHA512

7af8369ab73ccef6beb6c01a19a4f8f3db76215be1cd4c2cec056cd093b1be9498eccc3b11a157e70fc5e38b2dccd2634510ce4d3202ee9a2fdb0e1e273045b2
SSDEEP

6144:53kgJ29FVHAR/vM+tTxHtenhJjib4O1n:2HAhU2TxNEPO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b0d1a0ad0873849ef6fba03819b2703_JaffaCakes118

Files

8b0d1a0ad0873849ef6fba03819b2703_JaffaCakes118
.dll windows:1 windows x86 arch:x86

45766ff73dcf110b92156f7130e135f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gswag32

ord135
ord124
ord125
ord126
ord127
ord128
ord129
ord130
ord131
ord132
ord133
ord134
ord1201
ord136
ord137
ord138
ord196
ord197
ord198
ord199
ord200
ord201
ord202

user32

RegisterWindowMessageA
LoadStringA
SendMessageA

comdlg32

PrintDlgA
CommDlgExtendedError

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

kernel32

GlobalSize
GetEnvironmentStrings
GetCommandLineA
OpenFileMappingA
OpenMutexA
GetModuleFileNameA
WriteFile
GetStartupInfoA
GetFileType
GetStdHandle
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
lstrcpyA
WinExec
GetCurrentProcessId
GlobalHandle
ReleaseMutex
LocalFree
LocalUnlock
LeaveCriticalSection
LocalLock
LocalAlloc
WaitForSingleObject
GlobalReAlloc
lstrlenA
CloseHandle
UnmapViewOfFile
MapViewOfFile
TlsGetValue
GetCurrentDirectoryA
GetVersion
GetFullPathNameA
GetLogicalDrives
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetCPInfo
ExitProcess
VirtualFree
VirtualAlloc
MultiByteToWideChar
TlsAlloc
GetACP
GetOEMCP
GetLastError
TlsSetValue
TlsFree
WideCharToMultiByte
GetModuleHandleA
GetCurrentThreadId

Exports

Exports

AGAmp
AGAux
AGClose
AGClr
AGCurveStyle
AGDist
AGFontStyle
AGHot
AGInfo
AGInfo_
AGLabels
AGLegend
AGLegendStyle
AGOpen
AGPatt
AGReset
AGShow
AGSym
AGTitleG
AGTitleX
AGTitleY
AGXAxisStyle
AGYAxisStyle
G3AreaGraph
G3Arrow
G3Axis
G3BarGraph
G3Box
G3BubbleChart
G3Cage
G3CageStyle
G3Cube
G3DataLinScale
G3DataLogScale
G3DeleteObjects
G3Gantt
G3Grid
G3HLC
G3Label
G3LabelTab
G3Labeln
G3Legend
G3LineAbs
G3LineGraph
G3LogAxis
G3LogGrid
G3PieChart
G3SetModel
G3SetPerspective
G3SetPerspectiveAll
G3Show
G3SizeView
G3SurfaceGraph
G3TapeGraph
G3TestSpecial
G3Text
GSArc
GSArea
GSArea3D
GSArrow
GSAxis
GSBar2D
GSBar3D
GSBox2D
GSBox3D
GSBoxWhisker
GSBubbleChart
GSCage3D
GSCircle
GSClearView
GSClipRead
GSClipWrite
GSClosePrn
GSCloseServer
GSCloseView
GSCloseWin
GSCurveFit
GSDataAmp
GSDataAmpErr
GSDataAux
GSDataClr
GSDataDim
GSDataDist
GSDataDistErr
GSDataGetAmp
GSDataGetAmpErr
GSDataGetAmpErr_
GSDataGetAmp_
GSDataGetAux
GSDataGetClr
GSDataGetDist
GSDataGetDistErr
GSDataGetDistErr_
GSDataGetDist_
GSDataGetPatt
GSDataGetSym
GSDataGetZ
GSDataGetZ_
GSDataLabels
GSDataPatt
GSDataRange
GSDataReset
GSDataScale
GSDataStoreAmp
GSDataStoreAmpErr
GSDataStoreAux
GSDataStoreClr
GSDataStoreDist
GSDataStoreDistErr
GSDataStorePatt
GSDataStoreSym
GSDataStoreZ
GSDataSym
GSDataTrans
GSDataZ
GSDefPatt
GSEllipse
GSErrorBar
GSFixPos
GSGantt
GSGetACos
GSGetACos_
GSGetALog10
GSGetALog10_
GSGetALogE
GSGetALogE_
GSGetASin
GSGetASin_
GSGetATan
GSGetATan_
GSGetAXExt
GSGetAXExt_
GSGetAYExt
GSGetAYExt_
GSGetBG
GSGetCC
GSGetCC_
GSGetCos
GSGetCos_
GSGetCurX
GSGetCurX_
GSGetCurY
GSGetCurY_
GSGetCurveCoeff
GSGetCurveCoeff_
GSGetE
GSGetE_
GSGetLog10
GSGetLog10_
GSGetLogE
GSGetLogE_
GSGetMF
GSGetMax
GSGetMax_
GSGetMean
GSGetMean_
GSGetMin
GSGetMin_
GSGetPi
GSGetPi_
GSGetPrnHt
GSGetPrnHt_
GSGetPrnWid
GSGetPrnWid_
GSGetRTextHt
GSGetRTextHt_
GSGetRTextWid
GSGetRTextWid_
GSGetSD
GSGetSD_
GSGetSFHt
GSGetSFHt_
GSGetSFWid
GSGetSFWid_
GSGetSXExt
GSGetSXExt_
GSGetSYExt
GSGetSYExt_
GSGetSin
GSGetSin_
GSGetStatsInfo_
GSGetTan
GSGetTan_
GSGetVXExt
GSGetVXExt_
GSGetVYExt
GSGetVYExt_
GSGetVer
GSGetWXExt
GSGetWXExt_
GSGetWYExt
GSGetWYExt_
GSGrid
GSHLC
GSHotGraph
GSLabelPie
GSLabelX
GSLabelY
GSLabelnPie
GSLabelnX
GSLabelnY
GSLegend
GSLinLog
GSLineAbs
GSLineFit
GSLineRel
GSLoadRFont
GSLoadVFont
GSLogAxis
GSLogGrid
GSLogLin
GSLogLog
GSMClrRgn
GSMGetX
GSMGetX_
GSMGetY
GSMGetY_
GSMMotion
GSMNotify
GSMPtrOff
GSMPtrOn
GSMPtrType
GSMSetRgn
GSMStatus
GSMean
GSMinMax
GSMovePos
GSOffView
GSOnView
GSOpenChildWin
GSOpenPrn
GSOpenServer
GSOpenView
GSOpenWin
GSPicRead
GSPicWrite
GSPie2D
GSPie3D
GSPolar
GSPolarAxes
GSPolyFill
GSPolyVec
GSPrnOut
GSPrnSetup
GSRText
GSRefresh3D
GSSD
GSScatter
GSSelectPalette
GSSetBG
GSSetPal
GSSetPerspective
GSSetRFontFace
GSSetROP
GSSetVFontFace
GSShade
GSSizeSymbol
GSStatsArr
GSStatsWin
GSSymbol
GSTapeGraph
GSTimeGraph
GSTimeUpdate
GSUseView
GSVText
GSViewClip
GSWinHandle
GSWinNotify
GSWinPaint
GSXDataScale
GSXYGraph

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI1_
Size: 1024B - Virtual size: 933B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI2_
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI3_
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI4_
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI5_
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI6_
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI7_
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI8_
Size: 1024B - Virtual size: 1005B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45766ff73dcf110b92156f7130e135f4

Headers

File Characteristics

Imports

gswag32

user32

comdlg32

winspool.drv

kernel32

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

GDLAPI1_ Size: 1024B - Virtual size: 933B

GDLAPI2_ Size: 1024B - Virtual size: 568B

GDLAPI3_ Size: 2KB - Virtual size: 1KB

GDLAPI4_ Size: 1KB - Virtual size: 1KB

GDLAPI5_ Size: 1KB - Virtual size: 1KB

GDLAPI6_ Size: 1KB - Virtual size: 1KB

GDLAPI7_ Size: 1KB - Virtual size: 1KB

GDLAPI8_ Size: 1024B - Virtual size: 1005B

.bss Size: - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 104B

.data Size: 6KB - Virtual size: 6KB

.idata Size: 2KB - Virtual size: 1KB

Shared Size: 512B - Virtual size: 8B

.edata Size: 156KB - Virtual size: 156KB

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 30KB - Virtual size: 29KB

GDLAPI1_
Size: 1024B - Virtual size: 933B

GDLAPI2_
Size: 1024B - Virtual size: 568B

GDLAPI3_
Size: 2KB - Virtual size: 1KB

GDLAPI4_
Size: 1KB - Virtual size: 1KB

GDLAPI5_
Size: 1KB - Virtual size: 1KB

GDLAPI6_
Size: 1KB - Virtual size: 1KB

GDLAPI7_
Size: 1KB - Virtual size: 1KB

GDLAPI8_
Size: 1024B - Virtual size: 1005B

.bss
Size: - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 104B

.data
Size: 6KB - Virtual size: 6KB

.idata
Size: 2KB - Virtual size: 1KB

Shared
Size: 512B - Virtual size: 8B

.edata
Size: 156KB - Virtual size: 156KB

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 2KB