9664aa7039ec5f96855d7b534a56c471_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9664aa7039ec5f96855d7b534a56c471_JaffaCakes118
Size

276KB
MD5

9664aa7039ec5f96855d7b534a56c471
SHA1

3c958b86450c0a5e75beb4d450d121e34f1f70ca
SHA256

67d6333ae6102f0b06adcc6c9b6842f7fff01f23089aa237aa79ce127e947b8d
SHA512

4cac73cd9793f364a4f6fed7dcecf33dcf2213d1d3e4182643ed31b2877ba13918c4fd9875ebf82134198071475c27ae253e00edf07b2f6a585b6a8096c7d616
SSDEEP

6144:P2TKv5ukFs45Oi5GDVNlImCXDFFvGnTBdakJ:P3Uf4sVNOjGnTp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9664aa7039ec5f96855d7b534a56c471_JaffaCakes118

Files

9664aa7039ec5f96855d7b534a56c471_JaffaCakes118
.dll regsvr32 windows:5 windows x86 arch:x86

268d8f125dbe34d2edf21078dc42a0de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetCrackUrlA
InternetConnectA
InternetReadFile
HttpOpenRequestA
InternetGetConnectedState
HttpSendRequestA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA

shlwapi

StrCmpNIA
wnsprintfA
StrStrA
StrStrIA
StrToIntA
StrCmpNA
StrNCatA
PathFindExtensionA
PathFindFileNameA

rpcrt4

UuidCreate
UuidToStringA

kernel32

WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
CreateFileA
GetCPInfo
GetOEMCP
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetCommandLineA
RtlUnwind
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
GetACP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
WritePrivateProfileStringA
GlobalFlags
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
SetErrorMode
TlsFree
LocalReAlloc
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFree
GlobalUnlock
FormatMessageA
LocalFree
GetModuleFileNameW
GlobalAddAtomA
SetLastError
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
CompareStringA
InterlockedExchange
GlobalLock
GlobalAlloc
LockResource
GetVersionExA
HeapReAlloc
GetCurrentProcessId
lstrcpyA
CreateThread
CloseHandle
ReleaseMutex
GetCurrentThreadId
CreateMutexA
Sleep
TlsSetValue
GetProcessHeap
GetTickCount
WaitForSingleObject
HeapFree
InterlockedDecrement
InterlockedIncrement
HeapAlloc
lstrcpynA
TlsGetValue
lstrcmpA
TlsAlloc
DeleteCriticalSection
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
EnterCriticalSection
GetProcAddress
lstrcmpiA
GetLastError
RaiseException
lstrlenW
MultiByteToWideChar
IsDBCSLeadByte
LeaveCriticalSection
SizeofResource
WideCharToMultiByte
InitializeCriticalSection
GetModuleHandleW
LoadResource
FreeLibrary
lstrlenA
FindResourceA

user32

DestroyMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetDC
ReleaseDC
GetSysColorBrush
ClientToScreen
ShowWindow
SetWindowTextA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetWindowTextA
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
UnregisterClassA
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
SetCursor
PostMessageA
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
SendMessageA
SetTimer
KillTimer
CharNextW
CharNextA

gdi32

SetMapMode
GetStockObject
RestoreDC
SaveDC
DeleteObject
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA

ole32

CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc

oleaut32

SysAllocString
VariantChangeType
VariantInit
SysStringLen
LoadTypeLi
UnRegisterTypeLi
VarUI4FromStr
RegisterTypeLi
SysFreeString
LoadRegTypeLi
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

268d8f125dbe34d2edf21078dc42a0de

Headers

File Characteristics

Imports

wininet

shlwapi

rpcrt4

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 163KB - Virtual size: 162KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 10KB - Virtual size: 25KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 31KB - Virtual size: 30KB

.text
Size: 163KB - Virtual size: 162KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 10KB - Virtual size: 25KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 31KB - Virtual size: 30KB