042ff772e7d92f811629c12ecc79b867_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

042ff772e7d92f811629c12ecc79b867_JaffaCakes118
Size

88KB
MD5

042ff772e7d92f811629c12ecc79b867
SHA1

18ed2122f0453f9014a8407b7a8f124a77535419
SHA256

80fab0b76ed59579fdf64d50b6927aad845bcacc6e2f5f348dad448c5df1d7b6
SHA512

3272b45179a91f32533d88876573f7b7bff3d2e0261b298a82b47d36e149484496058ba112350d26a15a7df6c411d2b78a58caf725782f9718b00463af2b7ca8
SSDEEP

1536:Ftr0FmV1I8+Roefm8XO8scK8Q5HXmU1o9qimSZMsBHkZrgs9dL5gMfmThPObZucw:ecryoefvXXscGHXmU1ZimSZVVijmM1pc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
042ff772e7d92f811629c12ecc79b867_JaffaCakes118

Files

042ff772e7d92f811629c12ecc79b867_JaffaCakes118
.dll windows:4 windows x86 arch:x86

06fa98f308876075767b0fe6d50474d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
DisableThreadLibraryCalls
GetCurrentProcessId
OutputDebugStringA
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetSystemTimeAsFileTime
ExitProcess

user32

ReleaseDC
GetDC
MessageBoxA
PtInRect
DrawFocusRect
SetRect
OffsetRect
wsprintfA

gdi32

CreateDIBSection
GetDeviceCaps
SelectObject
StretchDIBits
BitBlt
GdiFlush
DeleteDC
DeleteObject
CreateCompatibleDC

display8

TransCopyDIBBitsX
dibGetPixelAddress
dibGetPixelAddressBits
dibGetPixelOffsetTopDownWide
dibDelete
dibReadFile
dibFXCopyBitsWide
dibCopyBitsWide
dibTransCopyBitsWide

msvcr71

__CppXcptFilter
_onexit
__dllonexit
_adjust_fdiv
__security_error_handler
_except_handler3
free
_initterm
malloc

Exports

Exports

AddSprite
AddSpriteDib
AddSpriteDibFromTemplate
AddSpriteTemplate
AnimRevision
AnimVersion
AnimVersionString
BackgroundDestroyDib
BackgroundSetDibFromFile
BackgroundSetDibFromPtr
BackgroundSetFlags
BackgroundSetStretch
CloseSpriteTemplate
DeleteSprite
DeleteSpriteDib
DeleteSpriteTemplate
DoFXSprite
GetDibSize
GetFixupPaintTimes
GetSpriteFromPoint
GetSpritePBIH
GetSpritePosition
GetSpriteRect
HideSprite
InitAnimate
IsSpriteVisible
MakeRectInvalid
MakeScanlineInvalid
OffsetRectInsideBackground
OpenSpriteTemplate
PaintScene
PaintScenePartialDepth
PaintSceneRect
PaintSceneSFX
RegisterDrawCallback
ResetFixupPaintTimes
SetCanvasColorTable
SetCanvasSize
SetDebugInvalidRects
SetSortMode
SetSpriteDib
SetSpriteDibFromTemplate
SetSpriteDibSizeFromRect
SetSpritePosition
SetSpriteSpriteDib
SetSpriteTemplate
ShowSprite
TerminateAnimate
UnHideSprite
UndoFXSprite
UnregisterAllDrawCallbacks
UnregisterDrawCallback

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06fa98f308876075767b0fe6d50474d4

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

display8

msvcr71

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 64KB - Virtual size: 64KB

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 64KB - Virtual size: 64KB

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 1KB - Virtual size: 1KB