c7e2d344cfed1eaf64b8e5fb8526b8ac_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c7e2d344cfed1eaf64b8e5fb8526b8ac_JaffaCakes118
Size

130KB
MD5

c7e2d344cfed1eaf64b8e5fb8526b8ac
SHA1

e676dc928400463efbc8e1c7c2b51ad33a543bea
SHA256

3fbc241936d96fb5cbf7134939574941533f9208fa34fe471646bfb02253384a
SHA512

f02a47cc2cdc6411d7eae70665a2be03c8a0d51d4c4a652145030341bbae6d1a8a1654538a14fd72411011532dfcd6dc8e988eaf40ec9109925e53b39c9694f0
SSDEEP

3072:CFVooiuIc9mHx4zEn8HhF4PRZ84mRRBIjrLxT8MTJUotPW+:0KoiuIr7n8O8HpATvhtn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7e2d344cfed1eaf64b8e5fb8526b8ac_JaffaCakes118

Files

c7e2d344cfed1eaf64b8e5fb8526b8ac_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e094109d45d2cb574f8f0edfc7a9bd93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
ExpandEnvironmentStringsW
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
GetCPInfo
GetStringTypeW
IsDBCSLeadByteEx
IsValidCodePage
LoadLibraryW
FreeLibrary
GlobalUnlock
GetLocaleInfoW
GetThreadLocale
CompareStringW
lstrcmpW
MulDiv
MultiByteToWideChar
GetLocaleInfoA
lstrcpyW
lstrcatW
GetLocalTime
GetTickCount
GlobalHandle
GlobalLock
GlobalAlloc
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProfileStringW
InterlockedExchange
LocalAlloc
LocalFree
CloseHandle
Sleep
IsDBCSLeadByte
lstrcmpiA
DeleteCriticalSection
lstrlenW
WideCharToMultiByte
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateMutexA
UnmapViewOfFile
WaitForSingleObject
ReleaseMutex
DisableThreadLibraryCalls
GetVersion
GetCommandLineA
VirtualProtect
GetACP

user32

FillRect
PostQuitMessage
GetFocus
LoadIconW
EnumChildWindows
LoadCursorW
RegisterClassW
GetKeyboardLayout
ClientToScreen
DispatchMessageW
GetDlgItem
EndDialog
SetScrollRange
SetScrollPos
SetDlgItemTextW
LoadStringW
GetDlgItemTextW
GetParent
TranslateMessage
IsDialogMessageW
GetMessageW
GetSysColor
AdjustWindowRectEx
SetRect
GetScrollInfo
UnregisterClassW
InvalidateRect
IsWindowEnabled
SendDlgItemMessageW
EnableWindow
ReleaseCapture
ShowCursor
SetFocus
DestroyWindow
CreateWindowExW
KillTimer
SetTimer
ShowWindow
SendMessageW
GetSystemMetrics
DrawFocusRect
GetWindowRect
GetClientRect
SetWindowLongW
GetWindowLongW
ReleaseDC
GetDC
GetWindowDC
MapWindowPoints
BeginPaint
EndPaint
GetMessagePos
PtInRect
DefWindowProcW
SetCapture
GetUpdateRect
WindowFromPoint
ScreenToClient
GetCursorPos
GetMessageTime
GetAsyncKeyState
ValidateRect
GetWindowTextLengthW
GetWindowTextW
MoveWindow

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegCreateKeyExA

gdi32

DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
TextOutW
GetTextAlign
GetCharWidth32W
GetFontData
GetTextExtentPoint32W
SetBkMode
SetTextAlign
GetDeviceCaps
GetTextMetricsW
SelectObject
DeleteObject
CreateFontIndirectW
SetBkColor
SetTextColor
CreateSolidBrush
UnrealizeObject
BitBlt

ole32

OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize

rpcrt4

NdrProxyGetBuffer
UuidFromStringA
NdrConformantArrayMarshall
NdrComplexArrayMarshall
NdrInterfacePointerMarshall
NdrPointerBufferSize
NdrPointerMarshall
NdrPointerUnmarshall
NdrInterfacePointerUnmarshall
NdrConformantArrayUnmarshall
NdrPointerFree
NdrInterfacePointerFree
NdrComplexStructBufferSize
NdrInterfacePointerBufferSize
NdrConformantArrayBufferSize
NdrComplexArrayBufferSize
NdrComplexStructMarshall
RpcRaiseException
NdrComplexStructUnmarshall
NdrComplexArrayUnmarshall
NdrStubInitialize
NdrUserMarshalUnmarshall
NdrStubGetBuffer
NdrUserMarshalFree
NdrProxyInitialize
NdrUserMarshalBufferSize
NdrConvert
NdrUserMarshalMarshall
NdrProxySendReceive
NdrProxyFreeBuffer

msvcrt

__CxxFrameHandler
_except_handler3
_adjust_fdiv
malloc
_initterm
free
sprintf
memmove
memset
_vsnwprintf
memcpy
towupper
exit
_ismbblead
_cexit
calloc
realloc
_wcsupr
wcsstr
_wtol
_XcptFilter
atoi

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e094109d45d2cb574f8f0edfc7a9bd93

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

rpcrt4

msvcrt

Sections

.text Size: 115KB - Virtual size: 114KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 35KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 115KB - Virtual size: 114KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 35KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB