ee82977706b6fe5001c7ed6d1a1c18c2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ee82977706b6fe5001c7ed6d1a1c18c2_JaffaCakes118
Size

279KB
MD5

ee82977706b6fe5001c7ed6d1a1c18c2
SHA1

1db6173f63ff41756bc5666f3e7b6f1041af6903
SHA256

d5268cceac8f5766b8b1e214a968a38318e5307f4728f1f8219cc52dec77cbe8
SHA512

7f76e50428faadcd8a5d3f5f84c6df35138a6d482f6235cc2561634e1838267dee27969f8e9cc540b6ff3d4a6bcb047ed382d87ed4f31f17acd99c75ef76cea7
SSDEEP

3072:h8BWsZhZko3T6ce++IsCFoadHtcvREP3IFQW8R1Yv3mOfydw+zXkv2gCvMXpvUu3:h0WskHschHvmOfyiuvsDisHunO1/D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee82977706b6fe5001c7ed6d1a1c18c2_JaffaCakes118

Files

ee82977706b6fe5001c7ed6d1a1c18c2_JaffaCakes118
.dll regsvr32 windows:5 windows x86 arch:x86

7dbda803ee4ded8360ceffd3fa97df1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\lim\version6\lib9\v6_w32_AVISourceBuffer.pdb

Imports

winmm

timeSetEvent
timeKillEvent
timeGetDevCaps
timeGetTime
timeBeginPeriod
timeEndPeriod

msvcr90

_except_handler4_common
_lock
__dllonexit
_purecall
__CxxFrameHandler3
??3@YAXPAX@Z
memset
memcpy
??2@YAPAXI@Z
_wtoi
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
_onexit

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ResetEvent
WaitForSingleObject
SetEvent
lstrcmpW
lstrcpynW
lstrlenW
InterlockedIncrement
InterlockedDecrement
CloseHandle
CreateEventW
WaitForMultipleObjects
ReleaseSemaphore
GetSystemInfo
VirtualFree
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
VirtualAlloc
FreeLibrary
LoadLibraryW
GetLastError
GetProcAddress
lstrcmpiA
SetErrorMode
GetVersionExW
DisableThreadLibraryCalls
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
SetThreadPriority
CreateThread
InterlockedExchange
Sleep
lstrcpyW
MulDiv
CreateFileMappingW
GetModuleHandleW
lstrcmpiW
GetThreadPriority
GetCurrentThread
GetTickCount
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime

user32

SendMessageW
SystemParametersInfoW
GetWindowPlacement
GetWindowThreadProcessId
IsWindow
AdjustWindowRectEx
GetClientRect
ReleaseDC
GetDC
SetParent
RegisterClassW
LoadCursorW
GetClassInfoW
SetForegroundWindow
RegisterWindowMessageW
MsgWaitForMultipleObjects
wvsprintfW
DispatchMessageW
IsIconic
IsZoomed
IsWindowVisible
SetWindowPos
GetSystemMetrics
GetParent
MapWindowPoints
GetWindowTextW
SetWindowTextW
InSendMessage
PostMessageW
GetDesktopWindow
GetWindowRect
LoadStringA
LoadStringW
PeekMessageW
GetQueueStatus
PostThreadMessageW
wsprintfW
DefWindowProcW
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
SetRectEmpty
CreateWindowExW

gdi32

CreateCompatibleBitmap
GetDIBits
CreatePalette
DeleteObject
SelectObject
BitBlt
StretchBlt
GetStockObject
CreateDCA
GetDeviceCaps
GetSystemPaletteEntries
CreateDIBSection
GetObjectW
SetDIBitsToDevice
StretchDIBits
SetDIBColorTable
GetTextExtentPoint32W
TextOutW
CreateCompatibleDC
SetStretchBltMode
RealizePalette
GdiFlush
SelectPalette
DeleteDC

advapi32

RegEnumKeyExW
RegCloseKey
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW

ole32

CoInitialize
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize

oleaut32

SysFreeString
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dbda803ee4ded8360ceffd3fa97df1a

Headers

File Characteristics

PDB Paths

Imports

winmm

msvcr90

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 175KB

.rdata Size: 67KB - Virtual size: 66KB

.data Size: 12KB - Virtual size: 12KB

.idata Size: 6KB - Virtual size: 6KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 176KB - Virtual size: 175KB

.rdata
Size: 67KB - Virtual size: 66KB

.data
Size: 12KB - Virtual size: 12KB

.idata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 13KB - Virtual size: 12KB