d56f2982a93e7425adf545a27aa5f827_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d56f2982a93e7425adf545a27aa5f827_JaffaCakes118
Size

184KB
MD5

d56f2982a93e7425adf545a27aa5f827
SHA1

d011be896cf0413c3b76638b479b99062eedb257
SHA256

3bada0d8de49e9591629b58dde4ad273e00e354de6fe31f31d02c0079d8b6235
SHA512

1a4e914b6ae08f9770f5a168c53c753789368e32564c925a93c34309464ee2a26e4478e88135ebc3c1db883ade709be91c5d29e5564f754bb0dae4d7c5c0171d
SSDEEP

3072:xBvQ6ut0qJKp9q026s+CAaHOy/cNicN5pEkXqSbo4nvSMgHL1VfFW2mkSFnCi6Du:jY6uzKp8gs+CAauJrRqSbokvSMgPfpmH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d56f2982a93e7425adf545a27aa5f827_JaffaCakes118

Files

d56f2982a93e7425adf545a27aa5f827_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1c975734c4cb4a49ce69e0d0434b5649

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

U:\arDfgqRBo\qfqBveueRrzYIj\sUjMDVcl.pdb

Imports

user32

GetUserObjectInformationA
wvsprintfA
InsertMenuA
SetForegroundWindow
SetRect
LoadIconA
SetWindowRgn
MonitorFromPoint
SetMenu
EndPaint
ClientToScreen
CharPrevA
CallWindowProcA
EnumThreadWindows
GetLastActivePopup
LoadBitmapW
RegisterClassW
GetMessageTime
EqualRect
SetMenuDefaultItem
GetParent
CharToOemA
DialogBoxIndirectParamA
GetTopWindow
PostMessageW
DrawTextA
CharLowerW
AttachThreadInput
SendMessageTimeoutA
SetScrollPos
CloseDesktop
DestroyMenu
GetUpdateRect
DestroyCursor
CharNextW
LoadStringA
LoadCursorW
UpdateWindow
GetClassLongA
CreateDialogParamW
IsWindowEnabled
PostMessageA
RegisterWindowMessageW
RegisterClassA
GetIconInfo
MonitorFromRect
RegisterClassExW
LookupIconIdFromDirectory
PostQuitMessage
RemovePropW
DeleteMenu
IsCharAlphaA
ToUnicodeEx
MapVirtualKeyW
GetWindowTextLengthW
GetUpdateRgn
SetDlgItemTextA
GetKeyNameTextW
GetWindowLongA
EnumChildWindows
GetForegroundWindow
TrackPopupMenu
GetWindowRect
BringWindowToTop
SetDlgItemTextW
CreateCursor
keybd_event
DrawFocusRect
GetDlgCtrlID
EnableMenuItem
GetWindowLongW
CharUpperBuffW
GetKeyState
ValidateRect
IsCharLowerA
DrawTextW
GetMenuStringA
mouse_event
CharUpperBuffA
UnionRect
DefWindowProcA
GetDCEx
PeekMessageA
AppendMenuA
EnableScrollBar
GetMenu
PostThreadMessageW
GetMenuCheckMarkDimensions
GetMenuItemCount
WaitMessage
OemToCharA
CheckRadioButton
KillTimer
GetDlgItem
DestroyIcon
GetClassInfoExA
SendDlgItemMessageA
DrawStateW
wsprintfA
HideCaret
CharNextA
IsChild
OpenDesktopW
SetScrollRange
GetClassNameW
GetNextDlgTabItem
AllowSetForegroundWindow
BeginDeferWindowPos
TranslateAcceleratorA
LoadImageA
HiliteMenuItem
SetTimer
TranslateMessage
SetWindowTextW
DispatchMessageA
GetSystemMenu
ScreenToClient
CheckDlgButton
FindWindowA
CharUpperW
DestroyWindow
InSendMessage
CharNextExA
SetMenuItemInfoW
DrawAnimatedRects
ReleaseDC
CopyRect
GetKeyboardLayout
CharPrevW
DefFrameProcW
ActivateKeyboardLayout
InvalidateRgn
SwitchToThisWindow
RegisterWindowMessageA
GetCaretPos
SetMenuItemBitmaps
CharLowerA
RegisterClassExA
SendInput
CharUpperA
SetWindowTextA
GetDC
IsWindowUnicode
GetWindowPlacement
GetMessageA
LoadCursorA
ShowWindow
DrawStateA
SendMessageTimeoutW
ShowScrollBar
SetRectEmpty
SetUserObjectInformationW
CreateMenu
InSendMessageEx
WaitForInputIdle
DrawMenuBar
CreateWindowExW
DialogBoxParamA
GrayStringW
EnableWindow

comctl32

ImageList_LoadImageW
ImageList_Write
ImageList_GetIcon
ImageList_Read
PropertySheetW
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Draw

msvcrt

mbtowc
exit
wcschr
strchr
_controlfp
__set_app_type
__p__fmode
srand
time
strtok
toupper
iswspace
__p__commode
wcsncpy
gmtime
strtoul
getenv
putc
fseek
setlocale
free
strtol
strrchr
_amsg_exit
strstr
isxdigit
swprintf
_initterm
vswprintf
fgets
fputs
_ismbblead
_XcptFilter
_exit
localtime
towlower
qsort
wcscpy
wcstombs
mbstowcs
isalnum
wcstoul
gets
_cexit
__setusermatherr
__getmainargs
atoi
bsearch
islower
iswprint
isspace
strerror
strspn
iswxdigit
atol
wcsrchr
towupper
iswdigit
wcsstr

kernel32

GetStdHandle
FindCloseChangeNotification
MoveFileExA
GetModuleHandleA
CreateThread
GetSystemTime
ReleaseMutex
GetFullPathNameW
FlushFileBuffers
GlobalReAlloc
IsBadReadPtr
GlobalDeleteAtom
GlobalFlags
GetAtomNameW
GetStartupInfoW
SuspendThread
CreateFileMappingW
SetThreadContext
lstrcpynW
CreatePipe
SetCommMask
GetTimeFormatW
GetStringTypeExW
GetLocaleInfoW
GetOverlappedResult
ConnectNamedPipe
GetPriorityClass
GetFileAttributesExA
CreateSemaphoreW
SetPriorityClass
VirtualFree
GlobalHandle
GlobalUnlock
GlobalMemoryStatusEx
GetComputerNameW
GetNumberFormatA
SearchPathA
FindResourceExA
CompareStringW
SetThreadPriority
EnterCriticalSection
ResetEvent
FindNextFileW
CancelIo
GetSystemDirectoryA
DeviceIoControl
CreateNamedPipeW
CallNamedPipeW
EnumResourceNamesA
SearchPathW
GetThreadPriority
DeleteFileA
GetComputerNameA
CompareFileTime
GetNumberFormatW
SetTimerQueueTimer
GetModuleFileNameA
SetupComm
SetCurrentDirectoryW
AddAtomW
QueryDosDeviceW
WriteFile
SetHandleCount
FindFirstFileA
PulseEvent
SetHandleInformation
HeapLock
LocalUnlock
DisconnectNamedPipe
LCMapStringW
AddAtomA
LeaveCriticalSection
QueryPerformanceCounter
GetTempPathA
OpenEventW

gdi32

GetSystemPaletteUse
CreateFontW
TranslateCharsetInfo
GetRgnBox
BeginPath
EndPage
GetTextMetricsA
Polyline
PtVisible
UnrealizeObject
CreateDIBitmap
RoundRect
OffsetRgn
GetPaletteEntries
CreateFontA
PtInRegion
RemoveFontResourceW
CreateFontIndirectW
CreateFontIndirectA
CreateCompatibleBitmap
GetObjectW
CreateBitmapIndirect
RectInRegion
StartDocW
SetDIBits
SetBitmapBits
SetTextColor
EnumFontFamiliesW
RealizePalette
CreatePenIndirect
CreateDIBSection
ResizePalette
LineTo
SaveDC
CreateBrushIndirect
GetTextFaceW
ScaleWindowExtEx
WidenPath
Ellipse
CombineRgn
CreateDiscardableBitmap
GetTextExtentPointA
SetViewportOrgEx
EnumFontsW
GetWindowOrgEx
AddFontResourceW
CreateCompatibleDC
CreateBitmap
TextOutW
OffsetViewportOrgEx
IntersectClipRect
SelectObject
Polygon
SetBitmapDimensionEx
PathToRegion
SetLayout
SetWindowOrgEx
SetDIBColorTable
LPtoDP
GetBkMode
CreateRoundRectRgn
PolyBezier
StretchBlt
StartPage
CreateHalftonePalette

Exports

Exports

?CrtSemaphoreOriginal@@IJIPAGJNPAK@X

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.iat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.virt
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c975734c4cb4a49ce69e0d0434b5649

Headers

File Characteristics

PDB Paths

Imports

user32

comctl32

msvcrt

kernel32

gdi32

Exports

Exports

Sections

.text Size: 89KB - Virtual size: 88KB

.iat Size: 1KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 109B

.data Size: 10KB - Virtual size: 9KB

.virt Size: - Virtual size: 45KB

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 89KB - Virtual size: 88KB

.iat
Size: 1KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 109B

.data
Size: 10KB - Virtual size: 9KB

.virt
Size: - Virtual size: 45KB

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 2KB - Virtual size: 1KB