bf50a4c9434ccd766c32f85edd8de8f3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bf50a4c9434ccd766c32f85edd8de8f3_JaffaCakes118
Size

115KB
MD5

bf50a4c9434ccd766c32f85edd8de8f3
SHA1

1285774a84279a6dd64b19a6e17c7cdeb0307c9b
SHA256

0d4a7ad9be4e326c691565d23eb0580b2236bf0ce351057699a47761b476c571
SHA512

23b6a3ba8ed2288eaf8ea22f36ec4705f101264cff25b19ae068ab1c17066aeaa5dca5c6330d8e93877d9c79e0807035782c29e931bee07010b7af77c56d549e
SSDEEP

3072:IFoAW1x8r3/u/dFzjiv1LCSQcdzQMzZ94bw7/:x8ruFzj8RCqzQMzZ99

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf50a4c9434ccd766c32f85edd8de8f3_JaffaCakes118

Files

bf50a4c9434ccd766c32f85edd8de8f3_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1a2ebbe3e41f50541c79839bfa0f3b25

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetWindowLongA
SetTimer
SetMenuItemInfoW
SetMenu
SetDebugErrorLevel
SendMessageW
RegisterClassA
PostQuitMessage
PostMessageA
OpenClipboard
NotifyWinEvent
MessageBoxW
MapVirtualKeyA
SetWindowLongW
CallWindowProcA
LoadIconA
LoadCursorA
LoadBitmapA
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowEnabled
IsDlgButtonChecked
InvalidateRect
InsertMenuItemA
GetWindowPlacement
GetWindowLongA
GetUserObjectInformationA
SetWindowTextW
ShowScrollBar
TileWindows
TrackPopupMenuEx
TranslateAcceleratorA
TranslateMDISysAccel
TranslateMessage
UpdateLayeredWindow
UpdateWindow
wsprintfA
LockSetForegroundWindow
GetMenuItemInfoW
GetMenuItemCount
GetKeyState
GetGUIThreadInfo
GetDlgItem
GetClientRect
GetClassInfoW
GetClassInfoA
FlashWindowEx
FindWindowA
EndPaint
EmptyClipboard
DrawStateW
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyAcceleratorTable
DdeGetLastError
DdeConnectList
CreateWindowExA
CreateMenu
CreateAcceleratorTableA
CheckMenuRadioItem
CharUpperA
CharPrevA
CharLowerW

ole32

RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
OleUninitialize
OleInitialize
DoDragDrop
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoInitialize

msvcrt

wcsncmp
wcslen
strlen
srand
rand
memset
memmove
memcpy
memcmp
free
exit
_wcsicmp
_purecall
_onexit
_initterm
_exit
_except_handler3
_controlfp
_beginthreadex
_adjust_fdiv
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__getmainargs
__dllonexit
__CxxFrameHandler
_XcptFilter
_CxxThrowException
malloc

comdlg32

PrintDlgA
GetFileTitleA

shell32

ShellExecuteA
SheChangeDirA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHGetFileInfoA
SHGetDesktopFolder
SHFileOperationA
SHChangeNotify
SHBrowseForFolderA

advapi32

GetUserNameW
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
RegCloseKey

kernel32

DeleteFileA
DeleteCriticalSection
DeviceIoControl
CreateDirectoryA
CopyFileW
CompareFileTime
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstFileA
FindNextChangeNotification
CreateFileA
FormatMessageA
GetCurrentProcess
GetDiskFreeSpaceA
GetDriveTypeA
GetExitCodeThread
GetFileSize
GetFullPathNameA
GetLastError
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemTime
GetTempPathW
GetTickCount
GetUserDefaultLangID
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
InterlockedIncrement
LoadLibraryA
LocalFree
MultiByteToWideChar
ReadFile
RemoveDirectoryA
SetEndOfFile
SetEvent
SetFilePointer
SetLastError
SetPriorityClass
UnmapViewOfFile
lstrcatA
WideCharToMultiByte
VirtualProtect
VirtualFree
VirtualAlloc
FindNextFileA

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a2ebbe3e41f50541c79839bfa0f3b25

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

msvcrt

comdlg32

shell32

advapi32

kernel32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 68KB - Virtual size: 68KB

.data Size: 18KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 68KB - Virtual size: 68KB

.data
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 4KB