af4ee985f9d9189d59453169f7563b9a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

af4ee985f9d9189d59453169f7563b9a_JaffaCakes118
Size

252KB
MD5

af4ee985f9d9189d59453169f7563b9a
SHA1

02a83575bd65f207ee75a26f1a9738f06246f20b
SHA256

74b58eaafc242e8cf1ba7a079a4c62a47af5370999ff3c3eaa9dfae4d31782a0
SHA512

ef7042296dddf64c9a8f043114067e319a18b031c0e28ad30e5929368020bfa7ee030fe0f85c85340550f79007874b5ff1220266d7638c458b46c2b574bdd0a9
SSDEEP

6144:uD197Ct3t8pN2B1vcHzBMyduNyCQg/qZ79TT4SX+hnc:0ytoYLKz7R9Hpuhn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af4ee985f9d9189d59453169f7563b9a_JaffaCakes118

Files

af4ee985f9d9189d59453169f7563b9a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4df253bc362e6ac056e4d23d8ee0f666

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_XcptFilter
_c_exit
_cexit
_initterm
_onexit
_wcsdup
exit
memmove
setlocale
wcscmp
wcscoll
wcslen
wcstod
_adjust_fdiv
__wgetmainargs
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__dllonexit
__CxxFrameHandler
_controlfp

shell32

DragFinish
SHGetSettings
SHGetSpecialFolderPathW
ShellAboutW
ShellExecuteExW
DragQueryFileW

ole32

CLSIDFromString
CoTaskMemFree
CreateILockBytesOnHGlobal
OleInitialize
OleRegGetUserType
OleUninitialize
ReleaseStgMedium
StgCreateDocfileOnILockBytes
StringFromCLSID

kernel32

lstrlenW
AddAtomW
CreateEventW
CreateFileW
DeleteAtom
ExitProcess
GetCommandLineA
GetCurrentThreadId
GetDateFormatW
GetLastError
GetModuleHandleA
GetShortPathNameW
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetVersionExA
GlobalAddAtomW
GlobalAlloc
GlobalFree
GlobalGetAtomNameW
HeapAlloc
HeapCreate
InterlockedIncrement
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MulDiv
MultiByteToWideChar
SetThreadPriority
SetUnhandledExceptionFilter
TerminateProcess
lstrcmpW

shlwapi

PathFindFileNameW

gdi32

TextOutW
SetTextColor
SetPixel
SetDCBrushColor
SetBkMode
SelectObject
ScaleWindowExtEx
Rectangle
RectVisible
PtVisible
GetTextMetricsW
GetTextExtentPoint32W
GetTextColor
GetStockObject
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetBkColor
ExtTextOutW
Escape
DeleteObject
DPtoLP
CreateSolidBrush
CreatePen
CreateICW
CreateFontIndirectW
CreateDCW
CreateCompatibleDC

user32

SetFocus
GetActiveWindow
CallNextHookEx
CharToOemBuffA
UpdateWindow
WinHelpW
FindWindowW
SetRect
DefWindowProcW
SetCursor
SendMessageW
SendMessageTimeoutW
SendDlgItemMessageW
PeekMessageW
OffsetRect
LoadMenuW
LoadIconW
GetNextDlgTabItem
GetMonitorInfoW
GetDC
GetAsyncKeyState
EnableWindow

comdlg32

ChooseFontW
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW

advapi32

RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

Exports

Exports

BAOCloseHandle
D3D9Begin
D3D9UnmapResources
DVDMRWVRIsDiscFinalized
DVDPRVRGetNumVideoRecordings
EnumSupportedImageSizeNext
GetDZoomMagnification
GetFile2
ReadAtCapDevParamFromRAW
RegisterShared
SetAllParamValueToAtCapture
SetMyColorDataProps
UnregisterDriveStatusCallback

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4df253bc362e6ac056e4d23d8ee0f666

Headers

File Characteristics

Imports

msvcrt

shell32

ole32

kernel32

shlwapi

gdi32

user32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 168KB

.data Size: 72KB - Virtual size: 108KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 168KB - Virtual size: 168KB

.data
Size: 72KB - Virtual size: 108KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB