dae0d2c2cd1397200557de20f5de89eb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dae0d2c2cd1397200557de20f5de89eb_JaffaCakes118
Size

248KB
MD5

dae0d2c2cd1397200557de20f5de89eb
SHA1

b82e9cddc92e98ed872076910d69c85a92fa2d6b
SHA256

46a79a8c879fe1604ca89c27c97e81d2a4833fc79f963dae984a10a9e060ec24
SHA512

3ea222ed8da1bfad340ea545afc42456d15921b9b413de007e64460d2b6795155a0b09af5d6d7438b8f63f3b53c43d3ac2d3704f6444fa45077d67839d88017e
SSDEEP

6144:YE6PAewU3oQnzCSWDIAoew5TYkkRRgKHbZ:0hnziDIA1w4R/HbZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dae0d2c2cd1397200557de20f5de89eb_JaffaCakes118

Files

dae0d2c2cd1397200557de20f5de89eb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ff3b290bb0e3f54c22a6bd8fa649b35b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW

ole32

StringFromCLSID
StgCreateDocfileOnILockBytes
ReleaseStgMedium
OleUninitialize
OleRegGetUserType
OleInitialize
IsEqualGUID
CreateILockBytesOnHGlobal
CLSIDFromString

gdi32

TextOutW
SetTextColor
SetDCBrushColor
SetBkMode
SelectObject
ScaleWindowExtEx
Rectangle
RectVisible
PtVisible
GetTextMetricsW
CreateCompatibleDC
CreateDCW
CreateFontIndirectW
CreateICW
CreatePen
CreateSolidBrush
DPtoLP
DeleteObject
Escape
ExtTextOutW
GetBkColor
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetStockObject
GetTextColor
GetTextExtentPoint32W

comdlg32

ChooseFontW
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

shell32

DragFinish
DragQueryFileW
SHGetSettings
SHGetSpecialFolderPathW
ShellAboutW
ShellExecuteExW

msvcrt

memmove
exit
_wcsdup
_onexit
_initterm
_controlfp
_cexit
setlocale
__wgetmainargs
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__dllonexit
__CxxFrameHandler
_XcptFilter
wcscmp
wcscoll
wcstod
_adjust_fdiv
_c_exit

shlwapi

PathFindFileNameW

kernel32

GetCurrentThreadId
GetDateFormatW
GetLastError
GetModuleHandleA
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetVersionExA
GlobalAddAtomW
GlobalAlloc
GetCommandLineA
ExitProcess
DeleteAtom
GlobalFree
CreateFileW
CreateEventW
AddAtomW
GlobalGetAtomNameW
HeapAlloc
HeapCreate
InterlockedIncrement
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MulDiv
MultiByteToWideChar
SetThreadPriority
SetUnhandledExceptionFilter
TerminateProcess
lstrlenW
lstrcmpW

user32

DefWindowProcW
CharToOemBuffA
CallNextHookEx
EnableWindow
FindWindowW
GetActiveWindow
GetDC
GetMonitorInfoW
LoadIconW
LoadMenuW
OffsetRect
PeekMessageW
SendDlgItemMessageW
SendMessageTimeoutW
SendMessageW
SetCursor
SetFocus
SetRect
UpdateWindow
WinHelpW
GetNextDlgTabItem

Exports

Exports

AudioGetFormatInfo
D3D10MapResources
D3D9ResourceGetSurfaceDimensions
D3D9UnmapResources
EnumShootingModeNext
Free
GLUnmapBufferObjectAsync
GetAtCaptureThumbnail
GetDllsVersion
GetObjectInfo
GetSupportParamValueHead
Memset
ReplaceStreamOfRAW
SetDoubleForDevice
UnregisterFatBinary

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff3b290bb0e3f54c22a6bd8fa649b35b

Headers

File Characteristics

Imports

advapi32

ole32

gdi32

comdlg32

shell32

msvcrt

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 164KB

.data Size: 72KB - Virtual size: 112KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 164KB - Virtual size: 164KB

.data
Size: 72KB - Virtual size: 112KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB