ee32b7676fcf484d6c3d817a0a533227_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ee32b7676fcf484d6c3d817a0a533227_JaffaCakes118
Size

124KB
MD5

ee32b7676fcf484d6c3d817a0a533227
SHA1

aaa3bd3a20071809383e0f0df588219761cc0190
SHA256

853061126fa579a72a3c5143aee134c3ea624b6e740797fe256f6a0bc26f0fae
SHA512

e1e5bfb0431e24185ede64751ed712e6d1fbb189e8213e7299ef1c634872f3c2e1f3869b663cf7dfbd9958469f3e46e560dafbc540b056d701567a83a80eaac9
SSDEEP

3072:yfpIaHG+JehEj637/7pbIJmFIz2qwqFmsaIUdcw:zaHG2s4637NbIU2Nee

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee32b7676fcf484d6c3d817a0a533227_JaffaCakes118

Files

ee32b7676fcf484d6c3d817a0a533227_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

0c33104db2814bb250ff320e39b688bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AddAtomW
SetDefaultCommConfigW
lstrcmpiW
ReadConsoleW
InterlockedCompareExchange
CompareStringW
FindFirstFileExW
GetVolumeInformationW
FindVolumeMountPointClose
VirtualUnlock
WideCharToMultiByte
FlushViewOfFile
SetFileAttributesA
FormatMessageA
SetVolumeLabelW
GlobalAddAtomA
CreateWaitableTimerA
IsBadWritePtr
FindFirstChangeNotificationA
GlobalReAlloc
lstrcatA
DuplicateHandle
ChangeTimerQueueTimer
FindResourceExA
WriteProfileStringW
CreateJobObjectW
HeapReAlloc
OpenProcess
CreateIoCompletionPort
ExitThread
LCMapStringW
GetCommandLineW
lstrcmpW
GetTempPathA
UpdateResourceA
GetDiskFreeSpaceW
RtlMoveMemory
AllocConsole
GetFileAttributesExW
GetComputerNameW
FlushConsoleInputBuffer
SleepEx
GetTimeFormatA
FindNextVolumeMountPointW
GetUserDefaultLCID
FindAtomA
FindNextFileW
GetDateFormatW
RemoveDirectoryA
TerminateJobObject
LocalLock
DeviceIoControl
GetLargestConsoleWindowSize
FindNextVolumeW
WriteProfileStringA
GetTempFileNameA
FileTimeToLocalFileTime
CreateConsoleScreenBuffer
CreateProcessW
GetTempFileNameW
QueueUserAPC
GetFileSizeEx
OpenMutexW
WriteProcessMemory
HeapDestroy
MapViewOfFileEx
GetSystemPowerStatus
GetLogicalDrives
GetShortPathNameW
SetErrorMode
lstrlenA
lstrcmpiA
GlobalGetAtomNameW
PeekNamedPipe
GetNumberFormatA
GlobalFlags
CreateRemoteThread
GetLogicalDriveStringsW
GlobalGetAtomNameA
HeapSetInformation
SetVolumeMountPointW
GetDefaultCommConfigW
GetUserDefaultLangID
SetComputerNameA
FlushFileBuffers
IsBadReadPtr
ClearCommError
SetWaitableTimer
LocalUnlock
GlobalMemoryStatusEx
LocalFlags
GlobalFindAtomW
SetFilePointer
lstrcpynA
SetConsoleMode
FindCloseChangeNotification
CreateToolhelp32Snapshot
CallNamedPipeA
GlobalDeleteAtom
LocalReAlloc
SetFilePointerEx
VerifyVersionInfoW
EnumSystemLocalesA
GetFileSize
QueueUserWorkItem
GlobalAddAtomW
OpenJobObjectW
ReadProcessMemory
FindFirstChangeNotificationW
GetLocalTime
SetNamedPipeHandleState
FindFirstFileA
GetComputerNameExW
GetEnvironmentVariableA
LeaveCriticalSection
GlobalAlloc
VirtualQuery
ExpandEnvironmentStringsA
CreateMutexA
ReleaseMutex
CopyFileA
GetCurrentProcessId
CreateProcessA
Sleep
GetProcessHeap
LocalFree
GetComputerNameA
CreateFileA
MapViewOfFile
VirtualProtect
CreateFileMappingA
LoadLibraryA
WaitForSingleObject
GetModuleHandleA
WriteFile
GetProcAddress
EnterCriticalSection
OpenFileMappingA

ole32

OleLoadFromStream
FreePropVariantArray
OleQueryCreateFromData
CoGetObjectContext
CoMarshalInterface
CoUnmarshalInterface
OleRegGetMiscStatus
OleRegGetUserType
CoSwitchCallContext
MkParseDisplayName
CoGetClassObject
CoWaitForMultipleHandles
OleIsRunning
RegisterDragDrop
StgOpenStorage
OleQueryLinkFromData
OleRun
OleCreateLinkToFile
CreateDataCache
StgCreateDocfileOnILockBytes
GetHGlobalFromStream
CoFreeUnusedLibraries
StgIsStorageFile
CoReleaseMarshalData
CoCreateFreeThreadedMarshaler
CoTaskMemRealloc
CoLockObjectExternal
CreateGenericComposite
StgIsStorageILockBytes
OleUninitialize
CoSetProxyBlanket
CoCreateGuid
RevokeDragDrop
CoTaskMemAlloc
OleCreate
CoUninitialize
CoInitialize
CoCreateInstance
OleSetContainedObject

user32

SetMenuItemInfoA
CreateIconFromResourceEx
SetDlgItemTextW
ChangeDisplaySettingsA
ShowCursor
MessageBoxExA
MsgWaitForMultipleObjectsEx
LoadAcceleratorsA
SetScrollRange
GetNextDlgTabItem
IsIconic
UnionRect
ValidateRect
SendNotifyMessageA
SetWindowTextA
GetMenuDefaultItem
GetWindowTextLengthA
TrackMouseEvent
IsRectEmpty
GetScrollInfo
GetMenuState
NotifyWinEvent
GetSysColorBrush
InsertMenuItemW
LoadStringA
PostMessageA
DefDlgProcA
SetDlgItemTextA
ScrollWindow
EnumWindowStationsW
GetClassInfoExW
LoadAcceleratorsW
EnumDesktopsW
LoadMenuW
AdjustWindowRect
ChangeDisplaySettingsW
MessageBoxExW
IsCharAlphaW
SetMessageQueue
InternalGetWindowText
GetActiveWindow
OpenDesktopA
GetDesktopWindow
SetPropA
EnableScrollBar
SetScrollPos
SetWindowContextHelpId
EnumWindows
CharUpperBuffA
AppendMenuW
GetFocus
EndDialog
SetWindowPlacement
GetThreadDesktop
GetMenuStringA
CallMsgFilterW
SetWindowsHookExW
DrawMenuBar
IsDialogMessageA
ChangeMenuA
GetDoubleClickTime
EndPaint
CharUpperBuffW
CreateCursor
ToAsciiEx
EnableMenuItem
AdjustWindowRectEx
ShowScrollBar
ChildWindowFromPoint
LoadIconW
GetDlgItemInt
InsertMenuA
DrawEdge
GetMenuItemCount
LookupIconIdFromDirectory
SetCapture
BringWindowToTop
GetMessagePos
MessageBoxIndirectW
SetDlgItemInt
SystemParametersInfoW
WinHelpA
RegisterWindowMessageW
LoadBitmapW
DispatchMessageW
InsertMenuW
SetMenuItemBitmaps
MoveWindow
GetMonitorInfoW
OpenIcon
GetForegroundWindow
MapVirtualKeyW
CheckRadioButton
WaitMessage
GetWindowTextA
SubtractRect
OemToCharA
CopyAcceleratorTableA
MapVirtualKeyExW
SetThreadDesktop
MessageBoxIndirectA
LockWindowUpdate
ToAscii
GetClassLongA
UnregisterHotKey
SendMessageTimeoutA
GetQueueStatus
ReleaseDC
SetProcessWindowStation
CharUpperA
GetClassLongW
CharLowerBuffW
ReleaseCapture
GetTabbedTextExtentA
GetParent
PostThreadMessageA
GetInputState
CreatePopupMenu
EnumDisplaySettingsA
DefFrameProcW
InvertRect
GetUpdateRgn
GetDCEx
SetCaretPos
EnableWindow
DefMDIChildProcW
GetCursor
FlashWindow
GetClassNameA
GetWindowLongA
GetMessageA
UnhookWindowsHookEx
RegisterClassExA
GetClientRect
SendMessageA
FindWindowA
CallNextHookEx
DispatchMessageA
ScrollWindowEx

shell32

ShellExecuteExW
SHOpenFolderAndSelectItems
SHGetPathFromIDListA
SHGetFolderLocation
ShellExecuteExA
SHGetFileInfoW
CommandLineToArgvW
SHFileOperationW
ShellAboutA
SHBrowseForFolderW
SHGetFolderPathA
SHBindToParent

gdi32

PlayEnhMetaFileRecord
GetTextFaceA
IntersectClipRect
SetBitmapDimensionEx
OffsetRgn
AbortPath
EndPath
BitBlt
ScaleWindowExtEx
GetGlyphOutlineA
SelectPalette
PolyBezierTo
OffsetViewportOrgEx
ExtTextOutA
DeleteEnhMetaFile
GetPaletteEntries
CreateFontIndirectA
CreateRectRgnIndirect
PolyBezier
SetMagicColors
ExtCreateRegion
GetClipRgn
CreateEnhMetaFileW
GetTextCharset
GetCharWidthA
SetArcDirection
GetRgnBox
GetBkColor
GetEnhMetaFileA
PolyPolyline
GetFontData
Polyline
CreateDCA
EnumFontFamiliesExW
GetObjectA
ExtEscape
EnumEnhMetaFile
CreatePenIndirect
CreateFontW
UpdateColors
GetEnhMetaFileBits
AddFontResourceA
GetCharABCWidthsW
CreateEllipticRgnIndirect
ResetDCA
GetSystemPaletteUse
LPtoDP
GetTextAlign
SetMapMode
GetViewportExtEx
ResizePalette
ExtTextOutW
GetMapMode
GetWindowExtEx
CloseFigure
PathToRegion
GetFontResourceInfoW
ExtFloodFill
SetTextJustification
GetPolyFillMode
GetEnhMetaFileHeader
GetNearestColor
TextOutA
SetBkMode
RectVisible
GetMetaFileBitsEx
GetObjectW
CloseMetaFile
SetViewportExtEx
CreateRoundRectRgn
CreateMetaFileA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c33104db2814bb250ff320e39b688bd

Headers

File Characteristics

Imports

kernel32

ole32

user32

shell32

gdi32

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 94KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 96KB - Virtual size: 94KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 3KB