da2f7586b06eac37745d471b03962fb4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

da2f7586b06eac37745d471b03962fb4_JaffaCakes118
Size

217KB
MD5

da2f7586b06eac37745d471b03962fb4
SHA1

24d7a84ba728d27985bef5deb556a2fbc2f60e01
SHA256

0f9a1d725c7cb2ae2f8783f5f18ffe6383f6b89937e5acc5b9198d32617c3c4d
SHA512

05555683017138fdd59c1dd5421abba9273bdcb29ced81e606a07f55ab6355e72262a140d5b5b83c71b081a7469d31b4febc7b500febf7992ce82dfc5117f81f
SSDEEP

6144:SZxy87rAjAs9Wk7Oaub276Dp7PfJnYlIemDM:S+87rAjNz6djS2l4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da2f7586b06eac37745d471b03962fb4_JaffaCakes118

Files

da2f7586b06eac37745d471b03962fb4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

15f9e470fcd720a2db2f224b0542665f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

W:\MebxeFH\zrggfWwcrgwt\gokrklvf.pdb

Imports

gdi32

CreateBitmapIndirect
EnumFontFamiliesExW
CreateBitmap
ExtTextOutW
GetSystemPaletteUse
GetDeviceCaps
LineTo
Escape
GetTextMetricsW
SetTextAlign
GetFontData
CreateFontIndirectW
EnumFontFamiliesW
SetRectRgn
GetClipBox
WidenPath
Rectangle
FillRgn
GetPaletteEntries
GetTextCharsetInfo
SetAbortProc
DPtoLP
SetWindowExtEx
CreateCompatibleDC
CreateFontW
GetTextFaceW
SetTextColor
SetMapMode
GetTextExtentPointW
EndPath
GetWindowOrgEx
CreateEllipticRgnIndirect
CreatePalette
CreateRectRgnIndirect
GetROP2
PathToRegion
SetViewportExtEx
IntersectClipRect
RemoveFontResourceW
UnrealizeObject
OffsetViewportOrgEx
SelectObject
CreateDCW
SetLayout
RestoreDC
GetLayout

msvcrt

wcsncpy
wcscpy
strncmp
isalpha
strcspn
_controlfp
atoi
__set_app_type
__p__fmode
towlower
ftell
fprintf
iswdigit
fflush
printf
calloc
__p__commode
_amsg_exit
strcpy
iswspace
_initterm
fgetc
toupper
_acmdln
srand
putc
strpbrk
exit
swscanf
_ismbblead
isdigit
vswprintf
iswctype
iswalpha
_XcptFilter
wcstod
sprintf
_exit
strcoll
strchr
fputs
wcscat
_cexit
strncpy
__setusermatherr
__getmainargs

kernel32

MoveFileA
IsBadWritePtr
GetModuleFileNameA
GetTempPathW
GetShortPathNameA
LocalLock
GetCurrentProcessId
WaitForSingleObjectEx
GetComputerNameA
GetFileInformationByHandle
WaitForSingleObject
LeaveCriticalSection
GetTimeFormatW
MulDiv
GetThreadContext
CreateMutexA
ReadConsoleInputW
GetSystemWindowsDirectoryW
MultiByteToWideChar
lstrlenW
FindCloseChangeNotification
GetSystemTimeAdjustment
GetStartupInfoA
FindResourceExW
HeapValidate
CancelIo
CreateNamedPipeA
SleepEx
GetNumberFormatA
GetLastError
FreeResource
GetModuleHandleA
CreateNamedPipeW
SearchPathA
CancelWaitableTimer
SetHandleCount
GetOverlappedResult
GetFileAttributesExA
EnumSystemLocalesA
GetSystemTime
FormatMessageW
ReadFile
CreateDirectoryW
InitializeCriticalSection
GetAtomNameW
GetVersionExW
FindFirstFileA
GetProcAddress
VirtualAlloc
SetThreadAffinityMask
CreateThread
GetWindowsDirectoryA

user32

LoadStringW
GetClassLongA
EqualRect
EndTask
InvertRect
IsWindowEnabled
GetMessageTime
SetScrollRange
DefWindowProcA
SetMenu
IsDlgButtonChecked
SendMessageTimeoutW
CreatePopupMenu
SetActiveWindow
DrawFocusRect
InflateRect
InvalidateRgn
ShowScrollBar
MapWindowPoints
SetForegroundWindow
GetUpdateRgn
RegisterHotKey
GetMenu
GetMessageExtraInfo
DestroyAcceleratorTable
IsCharUpperA
ShowCursor
CreateMenu
LoadImageW
SetParent
AdjustWindowRectEx
IsCharAlphaNumericW
CopyRect
wsprintfW
CheckMenuItem
CopyAcceleratorTableW
HiliteMenuItem
CreateDialogParamW
wvsprintfW
FrameRect
CallWindowProcA
IsCharAlphaW
GetActiveWindow
EnableScrollBar
GetKeyboardType
CharNextExA
GetDlgItem
DrawMenuBar
GetWindowPlacement
RegisterWindowMessageA
SetTimer
DrawIconEx
GetScrollRange
MonitorFromRect
GetTopWindow
ShowWindowAsync
SetWindowRgn
GetMenuItemID
AdjustWindowRect
SystemParametersInfoA
CharToOemW
GetKeyNameTextW
UnionRect
ReleaseDC
GetDlgItemTextA
LoadStringA
SendMessageTimeoutA
CharLowerA
FindWindowExW
LockWindowUpdate
MessageBoxW
MonitorFromPoint
GetDoubleClickTime
GetMessagePos
DestroyCursor
GetDCEx
DrawStateW
SwitchToThisWindow
RegisterClassW
SetDlgItemInt
DestroyMenu
RedrawWindow
GetForegroundWindow
GetClassLongW
RegisterClassA
OpenInputDesktop
RegisterWindowMessageW
RemoveMenu
TabbedTextOutW
InsertMenuItemW
LoadAcceleratorsA
ScreenToClient
GetWindowTextA
GetShellWindow
GetSubMenu
GetClassInfoW
CreateIconIndirect
SetWindowLongA
GetDlgCtrlID
CreateDialogParamA
GetWindowLongW
BringWindowToTop
LoadCursorW
SetMenuDefaultItem
DefFrameProcW
GetMenuItemRect
ScrollWindowEx
GetUpdateRect
DispatchMessageA
ReplyMessage

Exports

Exports

?EnumMediaTypeOriginal@@YGPAKPAFKJPAF&U
?PutMutantExW@@YGKNPAMPAF&U
?RtlObjectExW@@YGPAKDMDF&U
?IsNotScreen@@YGFPAGMEM&U
?GenerateModuleNew@@YGIJ&U
?FindMonitorEx@@YGPA_NPAEPAE&U
?MutantW@@YGIDHPAJ&U
?LoadDialogEx@@YGDKH&U
?RemoveSystemExA@@YGHPAEG&U
?FindSystemOriginal@@YGPAMPAN_N&U
?GlobalDateNew@@YGPAKPAE&U
?GlobalWindowEx@@YGINN&U
?IsNotFunctionExW@@YGJPAKH&U
?CopyMemoryOriginal@@YGHPAJ&U
?SendProject@@YGIPAFFKF&U
?CloseThreadW@@YGPAIJPAII&U
?ShowHeightOriginal@@YGGJGH&U
?IsTextOld@@YGPAGPAD&U
?IsValidPointNew@@YGXPAHGJ&U
?InstallMutexNew@@YGDPAIE&U
?InstallMutantExA@@YGEHPAGPA_N&U
?CopyMutexExW@@YGXMPAI&U
?GlobalProcessOld@@YGJPAMM&U
?DeleteMutexW@@YGXIKH_N&U
?CallScreenOriginal@@YGXPA_NF&U
?SetValueA@@YG_NDII_N&U
?PutFilePath@@YGFH&U
?CloseTimeA@@YGXEDN&U
?ModifyDirectoryNew@@YGJPADNPAM&U
?InvalidatePenEx@@YGPAHPAJPAKMG&U
?DeleteCharOld@@YGPAXNEFF&U
?FreeHeightW@@YGIPAGPAFGN&U
?GlobalSemaphoreOld@@YGKJ&U
?PutPointW@@YGFM&U
?IsValidArgument@@YGHDPAG_N&U
?InsertSemaphoreA@@YGXKPAME&U
?FindScreen@@YGE_N_N&U
?DeleteWindowNew@@YGPAXKIPAF&U

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imp
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exp
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.byte
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15f9e470fcd720a2db2f224b0542665f

Headers

File Characteristics

PDB Paths

Imports

gdi32

msvcrt

kernel32

user32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 75KB

.imp Size: 1KB - Virtual size: 1KB

.exp Size: 1KB - Virtual size: 1KB

.code Size: 512B - Virtual size: 32B

.byte Size: 512B - Virtual size: 44B

.data Size: 13KB - Virtual size: 13KB

.rdata Size: 6KB - Virtual size: 66KB

.rsrc Size: 115KB - Virtual size: 114KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 76KB - Virtual size: 75KB

.imp
Size: 1KB - Virtual size: 1KB

.exp
Size: 1KB - Virtual size: 1KB

.code
Size: 512B - Virtual size: 32B

.byte
Size: 512B - Virtual size: 44B

.data
Size: 13KB - Virtual size: 13KB

.rdata
Size: 6KB - Virtual size: 66KB

.rsrc
Size: 115KB - Virtual size: 114KB

.reloc
Size: 2KB - Virtual size: 1KB