b385a6834542101ae471fcc0437fe9b1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b385a6834542101ae471fcc0437fe9b1_JaffaCakes118
Size

101KB
MD5

b385a6834542101ae471fcc0437fe9b1
SHA1

41e544cb543ee22544d055c3a3c589e3d1bbb0d1
SHA256

e24275f714f3eb57ec56d69f850f0dd44d7df49b91b9522cac2ba4454a42d13c
SHA512

375b416fa6c0523f00a848f24a08c750047607a94e70ea10700f95e462aba0846415409fd18b365d872b2b97c1cd2e350406bd2e195bbe51898beea38945f2aa
SSDEEP

3072:4ZjvwbcHnfGgAwmox9UREaYc4ahulmPOq:zbcHnfHJLuhpPR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b385a6834542101ae471fcc0437fe9b1_JaffaCakes118

Files

b385a6834542101ae471fcc0437fe9b1_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5a7bfe668f2437c5ed4ea520192ebad8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

S:\rnnuelbvml\UirnjRbXKbvhzt\swRUwbrndYiwoh.pdb

Imports

shlwapi

StrStrIA
StrToIntExW

gdi32

SetPixel
PtInRegion
CreatePenIndirect
TranslateCharsetInfo
ResizePalette
GetFontData
GetObjectW
DPtoLP
SetDIBits
GetTextColor
GetViewportOrgEx
GetTextMetricsA
GetClipBox
CreateHalftonePalette
RectVisible
CreateRoundRectRgn
GetPixel
Rectangle
DeleteObject

user32

IsIconic
SendDlgItemMessageW
IsDialogMessageA
keybd_event
CharLowerBuffW
GetDialogBaseUnits
GetMenuStringW
GetWindow
DrawAnimatedRects
GetDlgItemTextW
InsertMenuItemW
GetUpdateRect
HiliteMenuItem
CharToOemW
GetSubMenu
LoadCursorW
LoadBitmapA
CreatePopupMenu
GetNextDlgTabItem
IsMenu
SetUserObjectInformationW
AppendMenuA
LookupIconIdFromDirectory
SendDlgItemMessageA
DrawEdge
DefDlgProcW
SetWindowLongA
CreateWindowExW
GetLastActivePopup
GetUserObjectInformationA
DrawFrameControl
SetForegroundWindow
CopyImage
GetScrollPos
CreateCaret
DrawMenuBar
GetFocus
GetKeyState
SendInput
CopyRect
PostQuitMessage
InSendMessage
GetMenu
InsertMenuA
RegisterWindowMessageA

msvcrt

toupper
setlocale
_controlfp
__set_app_type
__p__fmode
iswxdigit
wcstod
setvbuf
__p__commode
_amsg_exit
isprint
_initterm
localtime
getc
atol
_acmdln
malloc
strcspn
exit
_ismbblead
_XcptFilter
fgets
isupper
_exit
_cexit
__setusermatherr
__getmainargs

kernel32

SleepEx
CompareStringA
GetAtomNameW
SetTimerQueueTimer
GetTickCount
FlushFileBuffers
OpenEventA
FindFirstChangeNotificationW
GetVersionExA
GetModuleHandleA
GetLocaleInfoA
SearchPathA
lstrcpyA
GetModuleFileNameA
GlobalAddAtomW
OpenFile
GetCommConfig
LocalSize
ResumeThread
GetAtomNameA
GetComputerNameW
GetLocaleInfoW
GlobalMemoryStatusEx

Exports

Exports

InstallU
?ValidateCharA@@YGFI~U
?InvalidateDeviceOriginal@@YGHJ~U
PluginCommand
?GlobalDialogA@@YGMJPADPAID~U
PluginMain
PluginName
?KillMemoryExA@@YGPAXHK~U
PluginType
?RtlCommandLineW@@YGGDGPAM~U
?IsPointOriginal@@YGHPAHJM~U
?IncrementWidthExA@@YGPAJHGHF~U
?FindSystemNew@@YGXPAEPA_NPAI~U
?DeleteFile@@YGIJGG~U
PluginVersion
?ShowMutexNew@@YGGPAKPAIPAF~U
WSPStartup
?InsertMainStructDlhSi@@YGKGH@Z
?IsValidCommandLineOriginal@@YGFGPAEPAK~U

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.redt
Size: 1024B - Virtual size: 694B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rimp
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdbg1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rit
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdbg2
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rvar
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rpt
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ping
Size: - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a7bfe668f2437c5ed4ea520192ebad8

Headers

File Characteristics

PDB Paths

Imports

shlwapi

gdi32

user32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.redt Size: 1024B - Virtual size: 694B

.rimp Size: 2KB - Virtual size: 2KB

.rdbg1 Size: 512B - Virtual size: 28B

.data Size: 2KB - Virtual size: 1KB

.rit Size: 1024B - Virtual size: 516B

.rdbg2 Size: 512B - Virtual size: 72B

.rvar Size: 512B - Virtual size: 44B

.rpt Size: 1024B - Virtual size: 786B

.hdata Size: 512B - Virtual size: 252B

.ping Size: - Virtual size: 79KB

.rsrc Size: 69KB - Virtual size: 68KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

.redt
Size: 1024B - Virtual size: 694B

.rimp
Size: 2KB - Virtual size: 2KB

.rdbg1
Size: 512B - Virtual size: 28B

.data
Size: 2KB - Virtual size: 1KB

.rit
Size: 1024B - Virtual size: 516B

.rdbg2
Size: 512B - Virtual size: 72B

.rvar
Size: 512B - Virtual size: 44B

.rpt
Size: 1024B - Virtual size: 786B

.hdata
Size: 512B - Virtual size: 252B

.ping
Size: - Virtual size: 79KB

.rsrc
Size: 69KB - Virtual size: 68KB

.reloc
Size: 1KB - Virtual size: 1KB