a7444ea72f598e877bab7bfe4113e617_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a7444ea72f598e877bab7bfe4113e617_JaffaCakes118
Size

357KB
MD5

a7444ea72f598e877bab7bfe4113e617
SHA1

960acabccfaed41072665b82b97453903f302456
SHA256

25bd54169fdd46864ed5bbc0c597fa4ce51c2820942b055da2845055391bba1d
SHA512

97cc04d84689d6003bdc01d1fff852b265f63735b8bc9f0f4fc70127114b524eea5db5964209f74b49a83bf68d562a7479962bebed7024e9caa7b91315bbec0a
SSDEEP

6144:6IVqM/5YWAoZQPN3mTXanQpck23JzZl0FiZ06a2Vf1dw1cyAJ6zia0LZ2QJLbd1j:6AqBhrz709JzWy4v+cF+oEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7444ea72f598e877bab7bfe4113e617_JaffaCakes118

Files

a7444ea72f598e877bab7bfe4113e617_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cb51c6a219e45581ee5e473c9b370e3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

VariantInit
VariantClear
VarUI4FromStr
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocString
OleCreateFontIndirect
LoadTypeLi
LoadRegTypeLi

kernel32

GlobalHandle
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
GlobalFree
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
SetLastError
SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
lstrlenW
GlobalAlloc
GetVersionExA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FlushInstructionCache
DeleteCriticalSection
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
LockResource

user32

PtInRect
RedrawWindow
RegisterClassExA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SendMessageA
SetCapture
SetCursor
SetFocus
SetWindowContextHelpId
SetWindowLongA
SetWindowPos
SetWindowTextA
UnregisterClassA
wsprintfA
LoadStringA
LoadCursorA
IsWindow
IsChild
InvalidateRgn
InvalidateRect
MessageBoxA
GetWindowTextA
GetWindowRect
GetWindowLongA
GetWindow
GetSysColor
GetParent
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetCursorPos
GetClientRect
GetClassNameA
GetClassInfoExA
GetActiveWindow
FillRect
EndPaint
EndDialog
EnableWindow
DialogBoxIndirectParamA
DestroyWindow
DestroyAcceleratorTable
DefWindowProcA
CreateWindowExA
GetWindowTextLengthA
MapDialogRect
BeginPaint
CallWindowProcA
CharNextA
CreateAcceleratorTableA
GetDC

gdi32

SetBkMode
SetGraphicsMode
SelectObject
SetViewportOrgEx
SetWindowOrgEx
SaveDC
RestoreDC
ModifyWorldTransform
GetStockObject
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
SetTextColor
BitBlt

advapi32

RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA

shell32

ShellExecuteA

ole32

CoTaskMemFree
CoTaskMemRealloc
CreateStreamOnHGlobal
OleInitialize
OleLockRunning
OleUninitialize
StringFromGUID2
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc

comctl32

ord17

ddraw

DDInternalLock
GetSurfaceFromDC

Exports

Exports

ComputeTangentFrameEx
CreateEffectCompilerFromResourceW
CreateTextureFromFileA
GetDefaultLoadFileOption
GetImageInfoFromResourceA
IntersectTri
QuaternionRotationMatrix
QuaternionToAxisAngle
SetSaveResolution
WeldVertices
mpegInGetNextFrame
mpegSplitClose

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb51c6a219e45581ee5e473c9b370e3a

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

ddraw

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 186KB - Virtual size: 186KB

.data Size: 30KB - Virtual size: 31KB

.rsrc Size: 98KB - Virtual size: 97KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 186KB - Virtual size: 186KB

.data
Size: 30KB - Virtual size: 31KB

.rsrc
Size: 98KB - Virtual size: 97KB

.reloc
Size: 2KB - Virtual size: 1KB