e0ef9f745dec79ed53212e1c11e06cee_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e0ef9f745dec79ed53212e1c11e06cee_JaffaCakes118
Size

348KB
MD5

e0ef9f745dec79ed53212e1c11e06cee
SHA1

e75a49a9cfd7b681df90feb79432815c0cf33b23
SHA256

451ff777b65d225e69eaea21d55443846a2143327130a77093484eda7dc9b172
SHA512

1c478d2091dc79b1c4dd899f3b8adb4039c4d92340a737f01a186da168f075b6adff38eab9acca98e09326775d86293d28bf6ddd55baba08cfbd83ffed79c418
SSDEEP

6144:ck4A2ygFfZM6DeanHljvYVU/hyPx7nR8znZa/jfmH5V+VUwcMAd9Oav35GYon0aG:chBFrHhrzCuDlrjluxJOWSso

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0ef9f745dec79ed53212e1c11e06cee_JaffaCakes118

Files

e0ef9f745dec79ed53212e1c11e06cee_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4a2c8ea7860b8715b1b1f4250b5fc929

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IsWindow
CallWindowProcA
CharNextA
CreateAcceleratorTableA
CreateWindowExA
DefWindowProcA
DestroyAcceleratorTable
DestroyWindow
DialogBoxIndirectParamA
EnableWindow
EndDialog
EndPaint
FillRect
wsprintfA
UnregisterClassA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetWindowContextHelpId
SetFocus
SetCursor
SetCapture
SendMessageA
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClassExA
RedrawWindow
PtInRect
MessageBoxA
MapDialogRect
LoadStringA
LoadCursorA
BeginPaint
IsChild
InvalidateRgn
InvalidateRect
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindowLongA
GetWindow
GetSysColor
GetParent
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameA
GetClassInfoExA
GetActiveWindow

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CreateStreamOnHGlobal
OleInitialize
OleLockRunning
OleUninitialize
StringFromGUID2

gdi32

SetViewportOrgEx
SetTextColor
SetGraphicsMode
SetBkMode
SelectObject
SaveDC
RestoreDC
ModifyWorldTransform
GetStockObject
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetWindowOrgEx

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA

ddraw

DirectDrawEnumerateA
DSoundHelp

oleaut32

VariantInit
VariantClear
VarUI4FromStr
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocString
LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect

kernel32

InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
lstrlenA
GetVersionExA
GetTickCount
GetThreadLocale
lstrlenW
InterlockedIncrement
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FlushInstructionCache
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
IsDBCSLeadByte
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
SetLastError
SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcmpiA
GetProcessPriorityBoost
lstrcpynA
GetSystemTimeAsFileTime
GlobalAlloc
DeleteCriticalSection

comctl32

ord17

shell32

SheSetCurDrive
SHGetSpecialFolderLocation
SHGetInstanceExplorer
SHGetDiskFreeSpaceA
SHExtractIconsW
SHAppBarMessage
SHAddToRecentDocs
DragFinish
CommandLineToArgvW

Exports

Exports

ConvertMeshSubsetToSingleStrip
CreateEffectPool
CreateFontW
CreateVolumeTextureFromFileInMemoryEx
CreateVolumeTextureFromResourceExW
GatherFragments
GetComment
GetJ2KOptions
LoadMeshHierarchyFromXInMemory
LoadPRTBufferFromFileA
MatrixInverse
MatrixTransformation
SimplifyMesh
mpegInOpenMPEGIdxW

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a2c8ea7860b8715b1b1f4250b5fc929

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

gdi32

advapi32

ddraw

oleaut32

kernel32

comctl32

shell32

Exports

Exports

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 201KB - Virtual size: 200KB

.data Size: 39KB - Virtual size: 39KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 201KB - Virtual size: 200KB

.data
Size: 39KB - Virtual size: 39KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 3KB - Virtual size: 3KB