a8531b671dc23de87c65af86b65263db_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a8531b671dc23de87c65af86b65263db_JaffaCakes118
Size

347KB
MD5

a8531b671dc23de87c65af86b65263db
SHA1

9bdc3588f1276aaaeb99febae0f78e6a564b7392
SHA256

38d34f57090e7160b39e4f542070f1670e6fbd2e6d8574fe938a351c79ee5e59
SHA512

15bff4ff011bd922e72f975066c3c2bea5a5765b902ab5f768a49186d69fbd781d1b49a61934711583340d5581185b1c9be8074b2aa4022f47f79174a8efbe0f
SSDEEP

6144:lv1ELE4E8lSfVYFCLk4ugFCas/kDcv5eMzQIMGTl2U4KiASIQUjsvdu+ckQYsuRn:fEoNViCojKng2mxpptai6V6c5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8531b671dc23de87c65af86b65263db_JaffaCakes118

Files

a8531b671dc23de87c65af86b65263db_JaffaCakes118
.dll windows:4 windows x86 arch:x86

83950f0b697bac8b2e93952a99cfd366

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
SetLastError
SizeofResource
GetProcAddress
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
LeaveCriticalSection
lstrcpynA
lstrlenA
lstrlenW
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FlushInstructionCache
FindResourceA
IsProcessorFeaturePresent
IsDBCSLeadByte
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetVersionExA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetProcessPriorityBoost
lstrcmpiA
DeleteCriticalSection
GetProcessHeap
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
VirtualAlloc

advapi32

RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA

ole32

CoCreateInstance
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CreateStreamOnHGlobal
OleInitialize
OleLockRunning
OleUninitialize
StringFromGUID2
CLSIDFromProgID
CLSIDFromString

shell32

ShellExecuteA

oleaut32

VariantInit
VariantClear
VarUI4FromStr
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
OleCreateFontIndirect
LoadTypeLi
LoadRegTypeLi
SysStringByteLen

ddraw

DirectDrawEnumerateA
GetDDSurfaceLocal
DDGetAttachedSurfaceLcl

gdi32

BitBlt
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
GetStockObject
ModifyWorldTransform
RestoreDC
SaveDC
SelectObject
SetBkMode
SetGraphicsMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
CreateCompatibleBitmap

user32

wsprintfA
UnregisterClassA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetWindowContextHelpId
SetFocus
SetCursor
SetCapture
SendMessageA
ReleaseDC
BeginPaint
CallWindowProcA
CreateAcceleratorTableA
CreateWindowExA
DefWindowProcA
DestroyAcceleratorTable
DestroyWindow
DialogBoxIndirectParamA
EnableWindow
EndDialog
EndPaint
FillRect
GetActiveWindow
GetClassInfoExA
GetClassNameA
CharNextA
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetFocus
GetParent
GetSysColor
GetWindow
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
InvalidateRgn
IsChild
IsWindow
LoadCursorA
LoadStringA
MapDialogRect
MessageBoxA
PtInRect
RedrawWindow
RegisterClassExA
RegisterWindowMessageA
ReleaseCapture
GetClientRect

comctl32

ord17

Exports

Exports

CreateEffectCompilerFromResourceA
CreateNPatchMesh
CreateSkinInfo
CreateVolumeTextureFromFileW
GetJ2KOptions
OptimizeVertices
QuaternionRotationMatrix
SHProjectCubeMap
SaveFileMemory
SetLoadInfoCallback
SetWMFResolution
Vec4Transform
VecGetFontMapperLinkList
mpegInGetNextSample
mpegInSaveIdxW

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83950f0b697bac8b2e93952a99cfd366

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ole32

shell32

oleaut32

ddraw

gdi32

user32

comctl32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 53KB

.rdata Size: 176KB - Virtual size: 175KB

.data Size: 29KB - Virtual size: 31KB

.rsrc Size: 83KB - Virtual size: 82KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 53KB - Virtual size: 53KB

.rdata
Size: 176KB - Virtual size: 175KB

.data
Size: 29KB - Virtual size: 31KB

.rsrc
Size: 83KB - Virtual size: 82KB

.reloc
Size: 4KB - Virtual size: 3KB