ead11062db25b444e2ba922604df8df8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ead11062db25b444e2ba922604df8df8_JaffaCakes118
Size

1.2MB
MD5

ead11062db25b444e2ba922604df8df8
SHA1

77091ed2af3f033b731bd25d14351cd9e45eb97c
SHA256

548dc97bc24bad63b0715d4c76308e494b1d7664c776adccc99210789a3b9e08
SHA512

e2eec2b1a9e9d8a7e20ce0a34bae07b81a53f6fcf6aeda7f71a86588de91e4d159b0125ea118f807ab023819147a4e6c171739e5372fbd355e603bfdef961692
SSDEEP

24576:jYxwmybd6x2dfloezz827dGYBVlu23ktRtoYTVfQqX+K15X:3aMv5Vluf+YTbX11F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ead11062db25b444e2ba922604df8df8_JaffaCakes118

Files

ead11062db25b444e2ba922604df8df8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bf188a444535a43fa7c2882fad623453

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetStartupInfoA
GetFileType
WriteFile
SetFilePointer
GetCurrentThreadId
TlsSetValue
ReadFile
TlsAlloc
SetLastError
TlsGetValue
RaiseException
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
TlsFree
GetEnvironmentStringsW
InterlockedIncrement
MultiByteToWideChar
FlushFileBuffers
SetHandleCount
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
Sleep
LCMapStringA
LCMapStringW
SetEndOfFile
IsValidLocale
InterlockedDecrement
GetLocaleInfoA
GetProcAddress
InitializeCriticalSection
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapFree
GetTimeZoneInformation
HeapReAlloc
RtlUnwind
DeleteCriticalSection
SetStdHandle
CreateFileA
WaitForSingleObject
CreateMutexA
ReleaseMutex
FindClose
FindNextFileA
FindFirstFileA
LoadLibraryExA
FreeLibrary
GetFileSize
CreateFileW
GetTempFileNameA
GetTempPathA
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
EnumResourceNamesA
SizeofResource
LockResource
LoadResource
FindResourceA
DeleteFileA
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetVersion
GetCommandLineA
MoveFileA
GetLastError
GetCurrentProcess
TerminateProcess
ExitProcess
GetLocalTime
GetSystemTime
EnumSystemLocalesA
GetUserDefaultLCID
IsValidCodePage
GetLocaleInfoW

user32

DrawIconEx
DestroyIcon
GetIconInfo
CreateIconFromResource
wsprintfA
GetDC
ReleaseDC
CreateIconFromResourceEx
FillRect

gdi32

GetEnhMetaFileHeader
GetSystemPaletteEntries
CreatePalette
CreateDCA
CreateCompatibleDC
DeleteEnhMetaFile
SelectObject
PlayEnhMetaFile
DeleteDC
GetObjectA
GetStockObject
SelectPalette
RealizePalette
GetDIBits
SetWinMetaFileBits
GetEnhMetaFileA
CreateSolidBrush
CloseEnhMetaFile
SetDIBitsToDevice
DeleteObject
CreateCompatibleBitmap
GetDeviceCaps
CreateEnhMetaFileA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA

shell32

ExtractIconExA

Exports

Exports

EXIFGetDPI
EXIFGetOrientation
EXIFSetOrientation
EXIFThumbGet
crc32
deflate
deflateEnd
deflateInit_
deflateReset
gffAllock
gffAllockEx
gffCleanAndSetBitAtBuffer
gffCopy
gffCopyExtendedData
gffFree
gffGetBitAtBuffer
gffGetClippingRect
gffGetTemporaryFilename
gffResize
gflAllockBitmap
gflAllockBitmapEx
gflApplyLutFile
gflAutoCrop
gflAutoCrop2
gflBitblt
gflBitbltEx
gflBitmapGetEXIF
gflBitmapGetEXIFValue
gflBitmapGetIPTC
gflBitmapGetIPTCValue
gflBitmapGetXMP
gflBitmapHasEXIF
gflBitmapHasIPTC
gflBitmapIsSupportedByIndex
gflBitmapIsSupportedByName
gflBitmapRemoveEXIFThumbnail
gflBitmapRemoveMetaData
gflBitmapSetComment
gflBitmapSetIPTC
gflBitmapSetName
gflBitmapTypeIsSupportedByIndex
gflBitmapTypeIsSupportedByName
gflChangeColorDepth
gflCloneBitmap
gflCombineAlpha
gflCompressionIsSupportedByIndex
gflCompressionIsSupportedByName
gflCrop
gflEnableLZW
gflFileAddPicture
gflFileClose
gflFileCreate
gflFlipHorizontal
gflFlipVertical
gflFormatIsReadableByIndex
gflFormatIsReadableByName
gflFormatIsSupported
gflFormatIsWritableByIndex
gflFormatIsWritableByName
gflFreeBitmap
gflFreeBitmapData
gflFreeEXIF
gflFreeFileInformation
gflFreeIPTC
gflGetColorArray
gflGetColorAt
gflGetColorAtEx
gflGetDefaultFormatSuffixByIndex
gflGetDefaultFormatSuffixByName
gflGetDefaultLoadParams
gflGetDefaultSaveParams
gflGetDefaultThumbnailParams
gflGetErrorString
gflGetFileInformation
gflGetFileInformationFromHandle
gflGetFileInformationFromMemory
gflGetFormatDescriptionByIndex
gflGetFormatDescriptionByName
gflGetFormatIndexByName
gflGetFormatInformationByIndex
gflGetFormatInformationByName
gflGetFormatNameByIndex
gflGetLabelForColorModel
gflGetNumberOfFormat
gflGetVersion
gflGetVersionOfLibformat
gflIsCompatibleLutFile
gflIsLutFile
gflJPEGGetComment
gflJPEGSetComment
gflLibraryExit
gflLibraryInit
gflLibraryInitEx
gflLoadBitmap
gflLoadBitmapFromHandle
gflLoadBitmapFromMemory
gflLoadEXIF
gflLoadIPTC
gflLoadThumbnail
gflLoadThumbnailFromHandle
gflLoadThumbnailFromMemory
gflMemoryAlloc
gflMemoryFree
gflMemoryRealloc
gflMerge
gflNewIPTC
gflPNGGetComment
gflPNGSetComment
gflRemoveIPTCValue
gflReplaceColor
gflResize
gflResizeCanvas
gflRotate
gflRotateFine
gflSaveBitmap
gflSaveBitmapIntoHandle
gflSaveBitmapIntoMemory
gflSaveIPTC
gflSaveParamsIsSupportedByIndex
gflSaveParamsIsSupportedByName
gflScaleToGrey
gflSetColorAt
gflSetColorAtEx
gflSetIPTCValue
gflSetPluginsPathname
gflSetTransparentColor
inflate
inflateEnd
inflateInit_
inflateSync

Sections

.text
Size: 772KB - Virtual size: 771KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf188a444535a43fa7c2882fad623453

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Exports

Exports

Sections

.text Size: 772KB - Virtual size: 771KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 276KB - Virtual size: 284KB

.rsrc Size: 4KB - Virtual size: 920B

.reloc Size: 28KB - Virtual size: 27KB

.text
Size: 772KB - Virtual size: 771KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 276KB - Virtual size: 284KB

.rsrc
Size: 4KB - Virtual size: 920B

.reloc
Size: 28KB - Virtual size: 27KB