bdbcc83383bea079dcd755822593985c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bdbcc83383bea079dcd755822593985c_JaffaCakes118
Size

59KB
MD5

bdbcc83383bea079dcd755822593985c
SHA1

62894d1816c68ef6a36d598315d3296b128364aa
SHA256

d93c821f697a2d8d3cc273462e14b9ea0e8663fb6d9b143a5e22321401f60cf6
SHA512

1c2b9ca2f2b8958340e8f3c6a2e25cd7da8f22c9f5f9ef35205af1e32b0754f3a97c1c1960d149c36d3fab433f6338b738ce64bf20d816b112ca5e43e21a4888
SSDEEP

1536:KWKgWG1SopmOYATrFbK/p9NlbQtDDRYo7PCcK:KEWGNmxATpy9NsF6cK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdbcc83383bea079dcd755822593985c_JaffaCakes118

Files

bdbcc83383bea079dcd755822593985c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

40584983fee387e7524add70cbf2f8c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoA

user32

GetClientRect
EnableMenuItem
GetMenuState
PeekMessageA
MoveWindow
GetFocus
GetWindowTextA
TrackPopupMenu
FindWindowA
DrawFrameControl
GetSystemMenu
SetForegroundWindow
SetKeyboardState
IsDialogMessageA
DestroyWindow
DrawIcon
CreateWindowExA
GetParent
LoadAcceleratorsA
MessageBoxA
IsWindowVisible
DestroyIcon
SetWindowLongA
ModifyMenuA
GetWindowTextLengthW
CallNextHookEx
IsClipboardFormatAvailable
InsertMenuA
ShowWindow
DispatchMessageA
RedrawWindow
SetMenu
OpenClipboard
MessageBoxW
DestroyMenu

advapi32

GetUserNameW
OpenProcessToken
RegDeleteKeyA

mspmaqsp

_Wcrtomb
_FEps
_Exp
_FSnan
_FRteps
_Strcoll
_Eps
_Inf
_FNan
_Snan
_FXbig

gdi32

ExtTextOutA
SetBkMode
SetTextColor
CreateFontIndirectA
SetStretchBltMode
MoveToEx
CreateSolidBrush
PtInRegion
SelectClipRgn
StretchDIBits

comdlg32

CommDlgExtendedError
GetSaveFileNameW

kernel32

CloseHandle
GetDiskFreeSpaceA
GetComputerNameW
CreateProcessA
GetProfileStringA
LocalFree
TlsGetValue
VirtualQueryEx
GetVolumeInformationA
GetCurrentProcess
LocalAlloc
CreateEventA
CreateFileMappingW
VirtualQueryEx
LocalLock
GetModuleHandleA
GetCommandLineW
UnmapViewOfFile
Sleep
FormatMessageA
TerminateProcess
_hread
FindNextFileW
GlobalLock
lstrcmpA
GetCurrentThread
GetSystemInfo
TerminateThread
WaitForMultipleObjects
CopyFileW
lstrlenA
lstrlenW
GetModuleHandleA
GetLongPathNameW
DeviceIoControl
MapViewOfFileEx
MapViewOfFile
CreateMutexA
MultiByteToWideChar
FindResourceA
lstrcmpW
UnhandledExceptionFilter
GlobalFree
RaiseException

winspool

OpenPrinterA

shell32

SHGetFileInfoW

comctl32

InitCommonControls
ImageList_Add
ImageList_GetIconSize

Exports

Exports

GetDefaultServer
ConvertSidToU2Trustee
AdsTypeToLdapTypeCopyTime
CreateProcessNotify
ChangeSeparator
DllClientCleanup
lprpubw
DllClientStartup
ConvertU2TrusteeToSid
FreeADsStr
BuildADsPathFromLDAPPath
Component
FindEntryInSearchTable
BuildLDAPPathFromADsPath
FindSearchTableIndex
AdsTypeToLdapTypeCopyGeneralizedTime
GetLDAPTypeName
BerBvFree
GetPermLayers
AllocADsMem
AllocADsStr
FreeADsMem
SdbCloseApphelpInformation

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40584983fee387e7524add70cbf2f8c4

Headers

File Characteristics

Imports

version

user32

advapi32

mspmaqsp

gdi32

comdlg32

kernel32

winspool

shell32

comctl32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB