03b61577e427eed80a90be2bd455c104_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

03b61577e427eed80a90be2bd455c104_JaffaCakes118
Size

816KB
MD5

03b61577e427eed80a90be2bd455c104
SHA1

2b7ab607b8e9af1f6bfabc40512538943738c73d
SHA256

8a2d71fa4683c65f1dacf3938064860fa6f630dbdf90f2031b253e522d9b231f
SHA512

94db573823c7eb79e939fcaa81ef77f4dbf62c10d3d6546e8b058e69b1ab345735e6ded62f2af4ee2cb3e41b6cc10accf003c2031e62f6812123139e3abded44
SSDEEP

12288:FJ+tl+2KwyKb6ANrTZa3H0pDkFnwV0+c3jw9bKyiAWuogAuClBWE2:2tI2KwyurT1YwbcTfAlogAbm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03b61577e427eed80a90be2bd455c104_JaffaCakes118

Files

03b61577e427eed80a90be2bd455c104_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e676de1c581e00d67d9bbdf2278ecf9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
Sleep
InterlockedExchange
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
lstrcpynA
GetVersionExA
ReleaseMutex
WaitForSingleObject
CreateMutexW
OutputDebugStringW
DebugBreak
LoadLibraryExW
SizeofResource
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
GlobalReAlloc
GlobalFree
FindAtomW
AddAtomW
DeleteAtom
GetTickCount
GetPrivateProfileStringW
GetWindowsDirectoryW
GetModuleHandleW
GetFileAttributesW
CreateFileW
GetFileSize
CloseHandle
GlobalAlloc
GlobalLock
ReadFile
GlobalUnlock
MulDiv
EnumResourceLanguagesW
GetDateFormatW
GetModuleFileNameW
GetSystemDefaultLangID
lstrcmpiW
CompareStringW
lstrlenA
MultiByteToWideChar
InterlockedIncrement
lstrcpyW
lstrcpynW
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
GetVersionExW
LoadLibraryW
FreeLibrary
GetProcAddress
GetLastError
InterlockedDecrement
lstrcmpW
SetLastError
GetCurrentThreadId
lstrlenW
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
RaiseException
VirtualAlloc

user32

DestroyIcon
GetMessagePos
MessageBeep
LoadIconW
IsMenu
SetRect
DrawEdge
DestroyMenu
DrawStateW
FillRect
GetActiveWindow
GetWindowThreadProcessId
SetMenuItemInfoW
GetMenuItemInfoW
ModifyMenuW
GetMenuItemCount
TrackPopupMenuEx
MapWindowPoints
PostMessageW
GetSysColor
LoadBitmapW
LoadMenuW
GetClassLongW
DrawFrameControl
InflateRect
CallNextHookEx
GetWindowTextLengthW
GetWindowDC
OffsetRect
SetRectEmpty
SetParent
RedrawWindow
ShowWindow
GetClassNameW
GetPropW
CharLowerW
GetSystemMetrics
GetCapture
MoveWindow
SetWindowRgn
ReleaseDC
GetDC
GetDlgCtrlID
LoadImageW
GetFocus
GetSysColorBrush
GetNextDlgTabItem
SetFocus
DefWindowProcW
CallWindowProcW
DestroyWindow
ReleaseCapture
ChildWindowFromPoint
WindowFromPoint
UnhookWindowsHookEx
SetWindowsHookExW
SystemParametersInfoW
UpdateWindow
RegisterWindowMessageW
IsWindowVisible
IsWindowEnabled
DrawTextW
FrameRect
GetCursorPos
PtInRect
IsRectEmpty
CopyRect
LoadCursorW
GetClassInfoExW
SetWindowPos
IsWindow
GetDlgItem
GetParent
KillTimer
SetTimer
InvalidateRect
ScreenToClient
GetMenuStringW
EnableWindow
GetMessageTime
CharNextW
GetKeyState
PeekMessageW
GetSubMenu
GetWindow
BeginPaint
EndPaint
ClientToScreen
ValidateRect
SetWindowTextW
SendDlgItemMessageW
MapDialogRect
EndDialog
FindWindowExW
DialogBoxParamW
CreateDialogParamW
GetWindowRgn
EqualRect
ChildWindowFromPointEx
LoadStringW
RemovePropW
WindowFromDC
GetDesktopWindow
SetPropW
SetCapture
DestroyCursor
SetCursor
CreateCursor
GetScrollPos
SetDlgItemTextW
GetIconInfo
CreateIconIndirect
CopyIcon
IsIconic
LoadAcceleratorsW
wsprintfW
LoadStringA
PostQuitMessage
TranslateAcceleratorW
TrackPopupMenu
SystemParametersInfoA
IsZoomed
IntersectRect
CharUpperW
GetCaretPos
wvsprintfW
UnionRect
GetMenuItemID
GetMenuItemRect
GetTopWindow
EnableMenuItem
AppendMenuW
CreatePopupMenu
GetThreadDesktop
RegisterClassExW
IsChild
DrawIconEx
AdjustWindowRectEx
DrawFocusRect
GetSystemMenu
GetClientRect
GetWindowRect
GetWindowTextW
SendMessageW
CreateWindowExW
GetWindowLongW
SetWindowLongW
GetWindowPlacement
UnregisterClassA

gdi32

StretchDIBits
CreateDIBSection
CreatePatternBrush
GetDIBits
StretchBlt
SelectClipRgn
SetWindowOrgEx
CreateRectRgn
CreateRoundRectRgn
CombineRgn
OffsetRgn
GetRgnBox
GetTextColor
GetClipBox
DPtoLP
LPtoDP
GetTextExtentPoint32W
GetPixel
GetTextExtentPointW
SetStretchBltMode
GetObjectType
FillRgn
GetTextMetricsW
Arc
CreatePolygonRgn
SetArcDirection
SetViewportOrgEx
SetWorldTransform
SetGraphicsMode
SetPolyFillMode
TextOutW
SetWindowExtEx
GetWindowExtEx
SetViewportExtEx
GetViewportExtEx
SetMapMode
GetMapMode
ExtCreateRegion
GetBitmapBits
SetDIBitsToDevice
CreateBitmap
SetBrushOrgEx
PatBlt
Rectangle
Polygon
CreateFontIndirectW
GetDeviceCaps
BitBlt
GetCurrentObject
CreateCompatibleBitmap
SetBkColor
ExtTextOutW
CreateCompatibleDC
GetStockObject
RoundRect
EqualRgn
DeleteDC
SetTextJustification
GetDCOrgEx
CreateDCW
RestoreDC
FrameRgn
PtInRegion
CreatePen
LineTo
MoveToEx
SetBkMode
SetTextColor
GetObjectW
CreateSolidBrush
SelectObject
DeleteObject
ExcludeClipRect
SaveDC

advapi32

RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteW
SHAppBarMessage

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitializeEx
CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal

oleaut32

OleLoadPicture
SysAllocString
VarUI4FromStr

comctl32

ImageList_Destroy
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageCount
InitCommonControlsEx
ImageList_Create
ImageList_ReplaceIcon
ImageList_Remove
ord8
ImageList_GetIcon
ImageList_AddMasked
ImageList_DrawEx
ImageList_Add
ord17
CreateStatusWindowW
ImageList_LoadImageW
_TrackMouseEvent

msimg32

AlphaBlend
TransparentBlt

msvcr90

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_except_handler4_common
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
wcstoul
iswdigit
wcsncpy_s
memcpy_s
wcslen
labs
iswspace
cos
sin
wcscmp
abs
wcsrchr
_vsnwprintf
memmove
memcmp
wcsstr
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_wtoi
wcschr
malloc
??2@YAPAXI@Z
calloc
_recalloc
??_U@YAPAXI@Z
free
memcpy
_purecall
__CxxFrameHandler3
memset
swprintf_s
memmove_s
_CxxThrowException
??_V@YAXPAX@Z
??3@YAXPAX@Z
_crt_debugger_hook

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

Exports

Exports

WbxUI_AlphaBlend3232
WbxUI_BitmapToRegion
WbxUI_CenterWindow
WbxUI_ClearMagicWindow
WbxUI_CreateStretchBmpByTwoPosition
WbxUI_Cvt24BmpTo32ABMP
WbxUI_DisableXPVisualStyle
WbxUI_Draw3DRect
WbxUI_DrawArrow
WbxUI_DrawBKBmp
WbxUI_DrawButtonBK
WbxUI_DrawCmdBarBK_UseSystemStyle
WbxUI_DrawDisableBitmap
WbxUI_DrawHighLightText
WbxUI_DrawHypeLinkText
WbxUI_DrawRotateText
WbxUI_DrawStretchImageEx
WbxUI_DrawText
WbxUI_DrawText2AlphaBmp
WbxUI_DrawText2AlphaBmpEx
WbxUI_DrawTextEx
WbxUI_DrawTransparentBitmap
WbxUI_DrawTransparentBmpEx
WbxUI_DwmEnableNCRender
WbxUI_DwmIsCompositionEnabled
WbxUI_ExDrawLine
WbxUI_ExtractSubBitmap
WbxUI_FillSolidRect
WbxUI_GetBmpFromImgList
WbxUI_GetBmpHeight
WbxUI_GetBmpSize
WbxUI_GetBmpWidth
WbxUI_GetCharSet
WbxUI_GetFont
WbxUI_GetFontByLOGFONT
WbxUI_GetFontByPT
WbxUI_GetMagicWindowFlag
WbxUI_GetOSVersion
WbxUI_GetStretchImageEx
WbxUI_GetSystemMetrics
WbxUI_GetTextHeight
WbxUI_GetTextLength
WbxUI_GetUILibDefaultFont
WbxUI_Initialize
WbxUI_IsAeroSupport
WbxUI_IsMagicWindow
WbxUI_IsUseSystemStyle
WbxUI_LoadBmpFromJpgFile
WbxUI_SetCurLangID
WbxUI_SetMagicWindow
WbxUI_SetMagicWindowFlag
WbxUI_TransparentWindow
WbxUI_Uninitialize

Sections

.text
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e676de1c581e00d67d9bbdf2278ecf9c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

msvcr90

msvcp90

Exports

Exports

Sections

.text Size: 572KB - Virtual size: 571KB

.rdata Size: 103KB - Virtual size: 103KB

.data Size: 99KB - Virtual size: 102KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 39KB - Virtual size: 38KB

.text
Size: 572KB - Virtual size: 571KB

.rdata
Size: 103KB - Virtual size: 103KB

.data
Size: 99KB - Virtual size: 102KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 39KB - Virtual size: 38KB