ea73a564f1b6038527427ca1849967e6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ea73a564f1b6038527427ca1849967e6_JaffaCakes118
Size

130KB
MD5

ea73a564f1b6038527427ca1849967e6
SHA1

166115bab446475c2e07e5beb312f150cc301e53
SHA256

0764a41ad8857b961b5cf9ed84aabc15f0e3feb29c99d91f7acc6e2ae96aa687
SHA512

5e8507486fdb7ff18d6d643354da12570c50e9d465d7aa3fa08c2af3d3e0c00fc8ac03e4fa7918f948125a717d081e1d51880923348943e97523c05f76b34185
SSDEEP

3072:CFVooiuIc9mHx4zEn8HhF4PRZ84mRRBIjrLxT84TJUotPW+:0KoiuIr7n8O8HpATzhtn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea73a564f1b6038527427ca1849967e6_JaffaCakes118

Files

ea73a564f1b6038527427ca1849967e6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e094109d45d2cb574f8f0edfc7a9bd93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
ExpandEnvironmentStringsW
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
GetCPInfo
GetStringTypeW
IsDBCSLeadByteEx
IsValidCodePage
LoadLibraryW
FreeLibrary
GlobalUnlock
GetLocaleInfoW
GetThreadLocale
CompareStringW
lstrcmpW
MulDiv
MultiByteToWideChar
GetLocaleInfoA
lstrcpyW
lstrcatW
GetLocalTime
GetTickCount
GlobalHandle
GlobalLock
GlobalAlloc
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProfileStringW
InterlockedExchange
LocalAlloc
LocalFree
CloseHandle
Sleep
IsDBCSLeadByte
lstrcmpiA
DeleteCriticalSection
lstrlenW
WideCharToMultiByte
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateMutexA
UnmapViewOfFile
WaitForSingleObject
ReleaseMutex
DisableThreadLibraryCalls
GetVersion
GetCommandLineA
VirtualProtect
GetACP

user32

FillRect
PostQuitMessage
GetFocus
LoadIconW
EnumChildWindows
LoadCursorW
RegisterClassW
GetKeyboardLayout
ClientToScreen
DispatchMessageW
GetDlgItem
EndDialog
SetScrollRange
SetScrollPos
SetDlgItemTextW
LoadStringW
GetDlgItemTextW
GetParent
TranslateMessage
IsDialogMessageW
GetMessageW
GetSysColor
AdjustWindowRectEx
SetRect
GetScrollInfo
UnregisterClassW
InvalidateRect
IsWindowEnabled
SendDlgItemMessageW
EnableWindow
ReleaseCapture
ShowCursor
SetFocus
DestroyWindow
CreateWindowExW
KillTimer
SetTimer
ShowWindow
SendMessageW
GetSystemMetrics
DrawFocusRect
GetWindowRect
GetClientRect
SetWindowLongW
GetWindowLongW
ReleaseDC
GetDC
GetWindowDC
MapWindowPoints
BeginPaint
EndPaint
GetMessagePos
PtInRect
DefWindowProcW
SetCapture
GetUpdateRect
WindowFromPoint
ScreenToClient
GetCursorPos
GetMessageTime
GetAsyncKeyState
ValidateRect
GetWindowTextLengthW
GetWindowTextW
MoveWindow

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegCreateKeyExA

gdi32

DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
TextOutW
GetTextAlign
GetCharWidth32W
GetFontData
GetTextExtentPoint32W
SetBkMode
SetTextAlign
GetDeviceCaps
GetTextMetricsW
SelectObject
DeleteObject
CreateFontIndirectW
SetBkColor
SetTextColor
CreateSolidBrush
UnrealizeObject
BitBlt

ole32

OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize

rpcrt4

NdrProxyGetBuffer
UuidFromStringA
NdrConformantArrayMarshall
NdrComplexArrayMarshall
NdrInterfacePointerMarshall
NdrPointerBufferSize
NdrPointerMarshall
NdrPointerUnmarshall
NdrInterfacePointerUnmarshall
NdrConformantArrayUnmarshall
NdrPointerFree
NdrInterfacePointerFree
NdrComplexStructBufferSize
NdrInterfacePointerBufferSize
NdrConformantArrayBufferSize
NdrComplexArrayBufferSize
NdrComplexStructMarshall
RpcRaiseException
NdrComplexStructUnmarshall
NdrComplexArrayUnmarshall
NdrStubInitialize
NdrUserMarshalUnmarshall
NdrStubGetBuffer
NdrUserMarshalFree
NdrProxyInitialize
NdrUserMarshalBufferSize
NdrConvert
NdrUserMarshalMarshall
NdrProxySendReceive
NdrProxyFreeBuffer

msvcrt

__CxxFrameHandler
_except_handler3
_adjust_fdiv
malloc
_initterm
free
sprintf
memmove
memset
_vsnwprintf
memcpy
towupper
exit
_ismbblead
_cexit
calloc
realloc
_wcsupr
wcsstr
_wtol
_XcptFilter
atoi

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e094109d45d2cb574f8f0edfc7a9bd93

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

rpcrt4

msvcrt

Sections

.text Size: 115KB - Virtual size: 114KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 35KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 115KB - Virtual size: 114KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 35KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB