d4067caab2f835b537813fe64e15d9fd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d4067caab2f835b537813fe64e15d9fd_JaffaCakes118
Size

130KB
MD5

d4067caab2f835b537813fe64e15d9fd
SHA1

c14d7fa7136091a87ed07b9e51772d6acde29313
SHA256

1cf82405398622f53f5c81f67e2ef87b4ad49d0421d964729718332cfa30f73d
SHA512

b6f979567c57f8156cc8cd734ef0265017a58b410eaa6170a40ef25c6851b87c4bfd7ed06b723b9369035511e0335b0fb3ebd2086e112c9cf9edb77e8d556c42
SSDEEP

3072:CFVooiuIc9mHx4zEn8HhF4PRZ84mRRBIjrLxT8cTJUotPW+:0KoiuIr7n8O8HpATfhtn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4067caab2f835b537813fe64e15d9fd_JaffaCakes118

Files

d4067caab2f835b537813fe64e15d9fd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e094109d45d2cb574f8f0edfc7a9bd93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
ExpandEnvironmentStringsW
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
GetCPInfo
GetStringTypeW
IsDBCSLeadByteEx
IsValidCodePage
LoadLibraryW
FreeLibrary
GlobalUnlock
GetLocaleInfoW
GetThreadLocale
CompareStringW
lstrcmpW
MulDiv
MultiByteToWideChar
GetLocaleInfoA
lstrcpyW
lstrcatW
GetLocalTime
GetTickCount
GlobalHandle
GlobalLock
GlobalAlloc
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProfileStringW
InterlockedExchange
LocalAlloc
LocalFree
CloseHandle
Sleep
IsDBCSLeadByte
lstrcmpiA
DeleteCriticalSection
lstrlenW
WideCharToMultiByte
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateMutexA
UnmapViewOfFile
WaitForSingleObject
ReleaseMutex
DisableThreadLibraryCalls
GetVersion
GetCommandLineA
VirtualProtect
GetACP

user32

FillRect
PostQuitMessage
GetFocus
LoadIconW
EnumChildWindows
LoadCursorW
RegisterClassW
GetKeyboardLayout
ClientToScreen
DispatchMessageW
GetDlgItem
EndDialog
SetScrollRange
SetScrollPos
SetDlgItemTextW
LoadStringW
GetDlgItemTextW
GetParent
TranslateMessage
IsDialogMessageW
GetMessageW
GetSysColor
AdjustWindowRectEx
SetRect
GetScrollInfo
UnregisterClassW
InvalidateRect
IsWindowEnabled
SendDlgItemMessageW
EnableWindow
ReleaseCapture
ShowCursor
SetFocus
DestroyWindow
CreateWindowExW
KillTimer
SetTimer
ShowWindow
SendMessageW
GetSystemMetrics
DrawFocusRect
GetWindowRect
GetClientRect
SetWindowLongW
GetWindowLongW
ReleaseDC
GetDC
GetWindowDC
MapWindowPoints
BeginPaint
EndPaint
GetMessagePos
PtInRect
DefWindowProcW
SetCapture
GetUpdateRect
WindowFromPoint
ScreenToClient
GetCursorPos
GetMessageTime
GetAsyncKeyState
ValidateRect
GetWindowTextLengthW
GetWindowTextW
MoveWindow

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegCreateKeyExA

gdi32

DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
TextOutW
GetTextAlign
GetCharWidth32W
GetFontData
GetTextExtentPoint32W
SetBkMode
SetTextAlign
GetDeviceCaps
GetTextMetricsW
SelectObject
DeleteObject
CreateFontIndirectW
SetBkColor
SetTextColor
CreateSolidBrush
UnrealizeObject
BitBlt

ole32

OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize

rpcrt4

NdrProxyGetBuffer
UuidFromStringA
NdrConformantArrayMarshall
NdrComplexArrayMarshall
NdrInterfacePointerMarshall
NdrPointerBufferSize
NdrPointerMarshall
NdrPointerUnmarshall
NdrInterfacePointerUnmarshall
NdrConformantArrayUnmarshall
NdrPointerFree
NdrInterfacePointerFree
NdrComplexStructBufferSize
NdrInterfacePointerBufferSize
NdrConformantArrayBufferSize
NdrComplexArrayBufferSize
NdrComplexStructMarshall
RpcRaiseException
NdrComplexStructUnmarshall
NdrComplexArrayUnmarshall
NdrStubInitialize
NdrUserMarshalUnmarshall
NdrStubGetBuffer
NdrUserMarshalFree
NdrProxyInitialize
NdrUserMarshalBufferSize
NdrConvert
NdrUserMarshalMarshall
NdrProxySendReceive
NdrProxyFreeBuffer

msvcrt

__CxxFrameHandler
_except_handler3
_adjust_fdiv
malloc
_initterm
free
sprintf
memmove
memset
_vsnwprintf
memcpy
towupper
exit
_ismbblead
_cexit
calloc
realloc
_wcsupr
wcsstr
_wtol
_XcptFilter
atoi

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e094109d45d2cb574f8f0edfc7a9bd93

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

rpcrt4

msvcrt

Sections

.text Size: 115KB - Virtual size: 114KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 35KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 115KB - Virtual size: 114KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 35KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB