a078de21d4033a3638a911c8096b81fb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a078de21d4033a3638a911c8096b81fb_JaffaCakes118
Size

263KB
MD5

a078de21d4033a3638a911c8096b81fb
SHA1

6b0fd54c6df0e273678dc9903c2e2184c5c8cdd5
SHA256

fc1603464f30b7fdb14537287e38f3398b4cd2bd011399de21c8b78e8e368cdd
SHA512

5188b27c065fb048f7b8c139148a37cdb4571ce82c3ba98158a2a0e4e00f37ec2812addcb556c22429861755b02496251c8f549ff186fb39b96f6394c8493dfa
SSDEEP

6144:jnSI8i8jkYbCogVBRE7OGf1cG9vHH+NoG2LsqiuTZteZcp4i:jnSI8l3GlKkQLs/0eimi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a078de21d4033a3638a911c8096b81fb_JaffaCakes118

Files

a078de21d4033a3638a911c8096b81fb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

711ab95cc15d4abd306d4b2a2da166e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDBCSLeadByte
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
SetLastError
SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
lstrlenW
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FlushInstructionCache
FreeLibrary
GetACP
InterlockedIncrement
InterlockedExchange
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetThreadLocale
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetVersionExA
GetTickCount
DeleteCriticalSection

shell32

DragAcceptFiles
SHExtractIconsW
SHGetMalloc
SHGetSpecialFolderLocation
SHLoadNonloadedIconOverlayIdentifiers
ExtractIconW

comctl32

ord17

oleaut32

VariantInit
VariantClear
VarUI4FromStr
VarDecFromI2
SysStringLen
SysFreeString
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SafeArrayCreateVector
SysAllocString

gdi32

SetTextColor
SetGraphicsMode
SetViewportOrgEx
SetWindowOrgEx
SelectObject
SaveDC
RestoreDC
PlayEnhMetaFile
ModifyWorldTransform
GetStockObject
GetObjectA
GetDeviceCaps
DeleteObject
DPtoLP
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetBkMode

user32

GetActiveWindow
GetClassInfoExA
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetFocus
GetParent
GetWindow
GetWindowRect
GetWindowTextA
CreateWindowExA
InvalidateRgn
IsWindow
LoadStringA
MapDialogRect
FillRect
PtInRect
RedrawWindow
RegisterClassExA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SendMessageA
SetCapture
SetCursor
SetWindowContextHelpId
SetWindowLongA
SetWindowTextA
UnregisterClassA
wsprintfA
CopyImage
CharNextA
CallWindowProcA
BeginPaint
EndPaint
EndDialog
EnableWindow
DestroyWindow
DeregisterShellHookWindow
MessageBoxA
DefWindowProcA
GetWindowTextLengthA

ddraw

DirectDrawCreateClipper

advapi32

RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

Exports

Exports

ComputeTangentFrameEx
CreateEffectCompilerFromResourceW
CreateTextureFromFileA
GetDefaultLoadFileOption
GetImageInfoFromResourceA
IntersectTri
QuaternionRotationMatrix
QuaternionToAxisAngle
SetSaveResolution
WeldVertices
mpegInGetNextFrame
mpegSplitClose

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

711ab95cc15d4abd306d4b2a2da166e0

Headers

File Characteristics

Imports

kernel32

shell32

comctl32

oleaut32

gdi32

user32

ddraw

advapi32

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 43KB - Virtual size: 43KB

.rsrc Size: 51KB - Virtual size: 51KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 43KB - Virtual size: 43KB

.rsrc
Size: 51KB - Virtual size: 51KB

.reloc
Size: 2KB - Virtual size: 2KB