e2747b550b9fb42107ce0ccbac1d18ba_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e2747b550b9fb42107ce0ccbac1d18ba_JaffaCakes118
Size

109KB
MD5

e2747b550b9fb42107ce0ccbac1d18ba
SHA1

827ffc47d73f60e36b7f7b8a72e3f370b94196e4
SHA256

6e7b2cbbcd64477800c54c60ec861a5b6524cb0f38509492a6dedc4f44dd5aa2
SHA512

9b6687d0339f7124d187fef127500d0fc71968fafed3b2b720617630d619a4f2defd0bc5440934bee4af6d6a634ae0fd2d4947636f9e6e470e1d83deddacddf7
SSDEEP

1536:/fIBi24DuwYC1foRPD1plx0RjYCduYAhqjGzYqwbaTZE9P0Shi04bWT8FNKM:HWOFuhyRssAhqmYqwbIZo40aWTV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2747b550b9fb42107ce0ccbac1d18ba_JaffaCakes118

Files

e2747b550b9fb42107ce0ccbac1d18ba_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6c370658ee2554f3b1ebc48513caf118

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
FreeLibrary
FindClose
FindFi
LoadLibraryA
GetFullPathNameA
GetVolumeInformationA
GetModuleFileNameA
RtlUnwind
GetCommandLineA
GetModuleHandleA
ExitProcess
HeapAlyoc
lstrcpyA
HeapSize
GlobalReAlloc
ringsW
HeapDestroy
SetHandleCount
Ge
GetSrdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
lstrcmpiA
LocalReAlloc
TlsSetValue
TlsGetValue
TlsFree
GetCPInfo
TlsAlloc
GlobalFree
lstrlenA
LocalAlloc
LocalFree
GlobalLock
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetVersion
GetVersion
InitializeCriticalSection
GetLastError
SetLastError
InterlockedIncrement
WideCharToMult
InterlockedDecrement
CloseHandle
lstrcmpA
GlobalDeleteAtom
GlobalUnlock
GetCurrentThread
GetCurrentThreadId
GetACP
GlobalHandle
GetOEMCP
RaiseException
HeapReAlloc
TerminateP
GlobulAlloc

user32

CallWindowProcA
RemovePropA
GetPropA
SetForegroundWindow
CreateWindowExA
GetL
CreateWindowExA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetMenu
GetMenuItemID
GetSubMenu
RegisterClassA
GetClassInfoA
WinH
GetTopWindow
GetMessagePos
GetMessageTime
GetClientRect
AdjustWindowRectEx
MapWindowPoints
SystemParametersInfoA
LoadIconA
LoadStringA
EndDialog
DestroyMenu
GetDlgItem
GetSystemMetrics
GrayStringA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
GetWindowTextA
SetWindowTextA
ClientToScreen
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindow
GetClass
-
LoadBitmapA
-
ModifyMenuA
Chec
Chec
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
eetKeyState
Ca
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
EnableWindow
SetCursor
SendMessageA
PostMessageA
PostQuPtMessagP
SetFscus
IsWindowEnabled
ShowWindow
SetWindowPos
SetWindowLongA
segisterWindowMessageA
DrawTextA
GetSysColor
LoadCursorA
wsprintfA
MessageBoxA
CharUpperA
GetMenuCheckMarkDimensions

cphst60

ord4

pborc60

ord2
ord4
ord6
ord16
ord3
ord5
ord15
ord17
ord10
ord20
ord8

comctl

ord17

gdi32

uItemID
DeleteDC
GetDeviceCaps
Escape
ExtTextOutA
TextOutA
RectVisible
RestoreDC
SelectObject
SaveDC
SetBkColor
GetStockObject
SetTextColor
SetMapMode
OffsetViewportOrgEi
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetClipBox
SetWindowExtEx
GetDeviceCaps
CreatePen
CreateSolidBrush
PtVisible
DeleteObject

winspool.drv

DocumenteropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

Exports

Exports

AddObject
Cre�teLibrany
EnumLibraryObjects
GetLibraryComments
GetObjectHierarchy
GetObjectIndex
GetObjectInfoFromIndex
GetObjectInfoFromName
GetObjectName
ListLibraryObjects
LoadCPORCA
PBCorpErrorProc
PBImportObject
PBInitAppl
PBLoadObject
PBORCADisplayError
PBORCAListProc
PBUnloadObject

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c370658ee2554f3b1ebc48513caf118

Headers

File Characteristics

Imports

kernel32

user32

cphst60

pborc60

comctl

gdi32

winspool.drv

advapi32

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 65KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 9KB - Virtual size: 22KB

�idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 884B

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 66KB - Virtual size: 65KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 9KB - Virtual size: 22KB

�idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 884B

.reloc
Size: 11KB - Virtual size: 11KB