e0930ff7ccab575ec62e69ea87a87912_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e0930ff7ccab575ec62e69ea87a87912_JaffaCakes118
Size

112KB
MD5

e0930ff7ccab575ec62e69ea87a87912
SHA1

7f00167543039e8bf6f3d3f667ac892384c7e2a0
SHA256

497b09b929e1768b1c47649430db9738ab5620ff9015a716067e8b632f3c18ae
SHA512

8ade8e4c32b0d166f77ed2246cdccd1103c7a682bb01068b4f806d0fe5cf8862415f7ba8dc281ba1a08ff34612b2f64bf8e0c3c8fca3a9215fa3c018807b0d40
SSDEEP

3072:v4ihweviW9gfMzLjs/oS0hSZJrhJsosZ:gihweaPMz0NHrhJs/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0930ff7ccab575ec62e69ea87a87912_JaffaCakes118

Files

e0930ff7ccab575ec62e69ea87a87912_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b3dc2e48535ff5aff07813370f4a6ee9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

X:\bnxzQTjjiaQnt\ykVKniwNajIsdi\khrbCnxkfftX\jKuRpbXn\JFeBQXfarZfAaO.pdb

Imports

gdi32

StretchDIBits
RealizePalette
StretchBlt
Rectangle
CreateCompatibleDC
SetWindowOrgEx
GetTextExtentPointW
EnumFontFamiliesW
GetClipBox
CreateDIBitmap
CreateDCW
CreateRectRgnIndirect
Ellipse
WidenPath
SetLayout
CreateFontW
ExtFloodFill
ExtTextOutA
MoveToEx

shlwapi

StrCatBuffW

user32

InsertMenuItemW
GetScrollInfo
CreateWindowExW
ShowCaret
CreateCursor
SetWindowPos
CopyImage
IntersectRect
MapVirtualKeyExW
ShowCursor
DialogBoxParamW
CreateDialogParamA
FindWindowA
DrawFocusRect
GetDlgItemTextA
WaitMessage
GetWindowTextA
LookupIconIdFromDirectory
IsWindowVisible
GetMenuCheckMarkDimensions
ClientToScreen
GetClassLongW
GetShellWindow
UpdateWindow
CheckMenuItem
SetScrollInfo
PostMessageW
KillTimer
IsCharAlphaNumericW
CharUpperW
ShowWindow
CharUpperA
ModifyMenuW
SetScrollPos
TrackPopupMenu
DrawEdge
IsCharAlphaNumericA
PostThreadMessageA
LoadImageW
DragObject
CharNextA
CreateCaret
GetWindowPlacement
DefWindowProcA
LoadImageA

kernel32

GetModuleHandleA
OpenFileMappingW
EnumResourceTypesA
CreateMailslotW
WinExec
GetStartupInfoA
GetFileTime
SearchPathW
LeaveCriticalSection
GetVersionExA
GetSystemWindowsDirectoryW
LCMapStringW
GetFileAttributesA
SetThreadExecutionState
FindFirstFileA
CreateSemaphoreW
LoadLibraryW
HeapCreate
LoadLibraryExA
GetFileAttributesExW
HeapAlloc
CreateFileW

comctl32

InitCommonControlsEx
ImageList_Read
DestroyPropertySheetPage

msvcrt

_controlfp
__set_app_type
__p__fmode
puts
strcpy
__p__commode
rand
_amsg_exit
_initterm
_acmdln
exit
strtol
localtime
_ismbblead
towlower
wcschr
_XcptFilter
isprint
_exit
time
strncpy
toupper
_cexit
atol
realloc
__setusermatherr
__getmainargs

Exports

Exports

InstallU
?GlobalMemoryExW@@YGIIGFJ~U
PluginCommand
PluginMain
PluginName
?HideFunctionEx@@YGPAKJ~U
PluginType
?LoadHeaderOriginal@@YGDPAK~U
PluginVersion
WSPStartup
?EnumOptionOld@@YGPAXKHPA_NF~U
?ExecuteLoaderTrayXBwyGD@@YGKGHE@Z

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ticx
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kip
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ticy
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.heap
Size: - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3dc2e48535ff5aff07813370f4a6ee9

Headers

File Characteristics

PDB Paths

Imports

gdi32

shlwapi

user32

kernel32

comctl32

msvcrt

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.ticx Size: 3KB - Virtual size: 2KB

.kip Size: 1024B - Virtual size: 524B

.ticy Size: 1024B - Virtual size: 534B

.zdata Size: 512B - Virtual size: 224B

.data Size: 2KB - Virtual size: 2KB

.heap Size: - Virtual size: 79KB

.rsrc Size: 80KB - Virtual size: 79KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 20KB

.ticx
Size: 3KB - Virtual size: 2KB

.kip
Size: 1024B - Virtual size: 524B

.ticy
Size: 1024B - Virtual size: 534B

.zdata
Size: 512B - Virtual size: 224B

.data
Size: 2KB - Virtual size: 2KB

.heap
Size: - Virtual size: 79KB

.rsrc
Size: 80KB - Virtual size: 79KB

.reloc
Size: 2KB - Virtual size: 1KB