b3202cfef433c99d981b1d8b759c0680_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b3202cfef433c99d981b1d8b759c0680_JaffaCakes118
Size

272KB
MD5

b3202cfef433c99d981b1d8b759c0680
SHA1

1d0dacfa23a5b63b458e5857753bfec5f9076ff5
SHA256

19015d863e6688f13b04447c81b724b681020ba39202e125e543176072416c83
SHA512

98c4d7d70ae6c000b36cf09356a7f976d3a1af244c1a373853b28cc6126d727c1666bb5d752479ca027cf30c1deed372852e36d634e854d1e4a5fc519826faf1
SSDEEP

6144:AwHAPMV5VcI80CroAYBmVZqQCRcCXF0o:A0k0C/jqQF3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3202cfef433c99d981b1d8b759c0680_JaffaCakes118

Files

b3202cfef433c99d981b1d8b759c0680_JaffaCakes118
.dll windows:4 windows x86 arch:x86

16de19f12de198a7a5a058fa9a2d5d2b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\LocalSvnForDailyBuild\dabingusa_beta\Bin\Release\ToLoadAdapter.pdb

Imports

imagehlp

CheckSumMappedFile

psapi

GetModuleInformation
GetProcessImageFileNameA

kernel32

lstrcmpW
GlobalFindAtomA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GlobalFlags
GetCPInfo
GetOEMCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
HeapReAlloc
GetCommandLineA
InterlockedIncrement
WriteConsoleW
GetFileType
GetStdHandle
RaiseException
ExitProcess
HeapSize
Sleep
GetACP
IsValidCodePage
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
LoadLibraryW
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetThreadLocale
GlobalGetAtomNameA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
InterlockedDecrement
GetModuleFileNameW
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
lstrcmpA
FreeLibrary
GlobalAddAtomA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
SetLastError
LoadResource
LockResource
SizeofResource
FindResourceA
Module32First
Module32Next
VirtualProtect
CreateMutexA
CreateSemaphoreA
ReleaseSemaphore
GetCurrentProcessId
LocalAlloc
GetCurrentProcess
IsBadReadPtr
CreateToolhelp32Snapshot
Thread32First
GetCurrentThreadId
OpenThread
SuspendThread
Thread32Next
GetVersionExA
OpenProcess
WaitForSingleObject
TerminateProcess
WritePrivateProfileStringA
GetModuleFileNameA
CreateFileA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetFileSize
GetTickCount
HeapFree
GetProcessHeap
HeapAlloc
ResumeThread
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
VirtualProtectEx
GetModuleHandleA
GetProcAddress
InterlockedExchange
GetVersion
lstrlenA
CompareStringA
WideCharToMultiByte
GetLastError
MultiByteToWideChar
RtlUnwind

user32

DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
SetWindowTextA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
GrayStringA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
DestroyMenu
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowTextA
UnregisterClassA
UnhookWindowsHookEx
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ClientToScreen
CreateWindowExA
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
EnumWindows
GetWindowThreadProcessId
PostMessageA
MessageBoxA
GetClassNameA
GetDlgCtrlID
LoadCursorA

gdi32

DeleteDC
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateBitmap
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
InitializeAcl
AddAccessDeniedAce
AddAccessAllowedAce
SetSecurityInfo
FreeSid

shell32

SHFileOperationA

shlwapi

PathFindFileNameA
PathFindExtensionA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16de19f12de198a7a5a058fa9a2d5d2b

Headers

File Characteristics

PDB Paths

Imports

imagehlp

psapi

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

Sections

.text Size: 176KB - Virtual size: 174KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 16KB - Virtual size: 14KB

.reloc Size: 24KB - Virtual size: 21KB

.text
Size: 176KB - Virtual size: 174KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 16KB - Virtual size: 14KB

.reloc
Size: 24KB - Virtual size: 21KB