d1222c88dd1e15f1ec9955083c1d00b5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d1222c88dd1e15f1ec9955083c1d00b5_JaffaCakes118
Size

62KB
MD5

d1222c88dd1e15f1ec9955083c1d00b5
SHA1

5d78d015fb39447a30ec4aaf125e39d2822dd81a
SHA256

c0c682ca2a3ccbb25422fb64c755b5b62edb337aad9ed5708cead26a51a764a8
SHA512

e07a1c7d6f4f17ad3fc81d42f2b5da7378bb5fa88c5d369a75125b29718980923b1b8deacc2e28c280a2cf558b97413bc1eb324c1ce8bed5ad301a10769182df
SSDEEP

1536:78JFxE3qRYCtnNYeHoIH5n+YhN1EPyJ7suVUogBBoh:AJyCrJr+0EaJtVkT8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1222c88dd1e15f1ec9955083c1d00b5_JaffaCakes118

Files

d1222c88dd1e15f1ec9955083c1d00b5_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1c52e4ad19616c97e81bf4ea75e90389

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndPaint
GetCaretPos
MessageBoxA
GetClientRect
CreateCaret
CreateWindowExA
GetForegroundWindow
GetKeyState
IsWindow
AppendMenuA
GetKeyboardLayout
GetParent
LoadCursorA
UnhookWindowsHookEx
SetCaretPos
ReleaseDC
IntersectRect
GetWindowRect
DrawFocusRect
wsprintfA
CharToOemBuffA
CallNextHookEx
ShowWindow
RegisterClipboardFormatA
SetFocus
SetActiveWindow
ScreenToClient
InvalidateRect

kernel32

MultiByteToWideChar
GetVersion
GetFileAttributesA
RtlUnwind
QueryPerformanceFrequency
WriteFile
DeleteCriticalSection
GlobalLock
GetStdHandle
DuplicateHandle
GetTickCount
RaiseException
SetProcessAffinityMask
GetDateFormatA
TerminateProcess
lstrlenW
SetHandleCount
GetCurrentThread
GetComputerNameW
GetProcAddress
WaitForMultipleObjects
SetThreadLocale
CloseHandle
GetModuleHandleA
ReleaseMutex
SetFilePointer
GetModuleHandleA
GetCPInfo
SizeofResource
ReadFile
VirtualQueryEx
MapViewOfFileEx
VirtualQuery
LeaveCriticalSection
GetUserDefaultLCID
CloseHandle
InitializeCriticalSection
IsValidCodePage
GetLocaleInfoA
LCMapStringA
GetLastError
CreateFileMappingW
WaitForSingleObject
GetDriveTypeA
InterlockedDecrement
FileTimeToLocalFileTime
FindResourceA
WideCharToMultiByte
DeleteFileA
GetWindowsDirectoryA
HeapAlloc
GetStringTypeA
LocalAlloc
GetSystemDefaultLangID

dpvvplug

_Getcvt
_FSnan
_FNan
_LExp
_FEps
_Mbrtowc
_FDnorm
_Poly
_FSinh
_FRteps
_LEps
_FXbig
_Dnorm
_Stod
_Inf
_Dscale
_Strxfrm
_LDtest
_LSinh
_FDtest
_Dtest
_Toupper
_Rteps
_FExp
_Sinh
_LDscale
_FInf
_LCosh
_Nan
_LXbig

shell32

SHGetPathFromIDListA
SHGetMalloc
SHChangeNotify

comctl32

ImageList_DragShowNolock
ImageList_DragMove
ImageList_BeginDrag
ImageList_SetDragCursorImage
PropertySheetA
CreatePropertySheetPageA

ole32

RegisterDragDrop
DoDragDrop
OleUninitialize

gdi32

CreateRectRgn
GetTextExtentPoint32A
CreateFontIndirectA
SelectObject
GetClipBox
SetBkColor
ExtTextOutW

Exports

Exports

CreateProcessNotify
DllClientCleanup
fastecab
AllocADsMem
DllClientStartup
BerBvFree
ApphelpUpdateCacheEntry
GetDefaultServer
AdsTypeToLdapTypeCopyTime
FreeADsStr
BuildADsPathFromParent
FindEntryInSearchTable
BuildADsParentPathFromObjectInfo
ConvertSidToU2Trustee

Sections

.text
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c52e4ad19616c97e81bf4ea75e90389

Headers

File Characteristics

Imports

user32

kernel32

dpvvplug

shell32

comctl32

ole32

gdi32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB