0510099d39fd3f921405948b664335d1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0510099d39fd3f921405948b664335d1_JaffaCakes118
Size

780KB
MD5

0510099d39fd3f921405948b664335d1
SHA1

809c6647721439fb0d14cb951be16ec00542b22f
SHA256

a07e234c761e5b1ceffcfa630431a7ac538167edb8ceaa65eb80c007483171ae
SHA512

b1b00bc97c8525e5a2790dbfc36dfb6f2072e5be64251e041be45802587ef203e49a6a9a33f83bb32a998673e15c3faad28cf632cad4d02e03d347225b83460e
SSDEEP

12288:7l8p8uDR0c8ba1ShGmqtvMZWePc1RolKb7sX7KA43JP1G64gmTLQGJB95kXn:7l8p3DRhHSIGWjvMK3sX+V3JKd2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0510099d39fd3f921405948b664335d1_JaffaCakes118

Files

0510099d39fd3f921405948b664335d1_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

820ac6b4db2694fc3d8d126e4e59c1cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Source\CXP_1_2\ToolBar\SearchBar\ReleaseMinDependency\SearchBar.pdb

Imports

wininet

InternetOpenUrlA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetQueryDataAvailable
InternetReadFile
InternetCrackUrlA
InternetGetConnectedState
InternetCanonicalizeUrlA
InternetCreateUrlA

shlwapi

StrStrIW
UrlUnescapeA
StrStrW
PathRemoveFileSpecA
PathRemoveBackslashA

kernel32

CloseHandle
CreateMutexA
Sleep
GetSystemDefaultLangID
GetModuleHandleA
SetEnvironmentVariableA
SetEndOfFile
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
LocalFree
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetThreadLocale
GetLocaleInfoA
GetACP
ExpandEnvironmentStringsA
SetFileAttributesA
IsDBCSLeadByteEx
GetSystemDirectoryA
GetVolumeInformationA
CreateThread
GetExitCodeProcess
CreateProcessA
WriteFile
ResetEvent
GetFileSize
ReadFile
GetWindowsDirectoryA
GetFileAttributesA
CreateFileA
WaitForSingleObject
ReleaseMutex
GetVersionExA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
IsBadWritePtr
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
LoadLibraryA
FreeLibrary
CompareStringW
CompareStringA
InterlockedExchange
GlobalHandle
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
lstrcmpA
GlobalAlloc
InterlockedCompareExchange
DisableThreadLibraryCalls
IsDBCSLeadByte
InterlockedIncrement
LoadLibraryExA
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
GetCommandLineA
GetDateFormatA
GetTimeFormatA
CreateEventA
SetEvent
DeleteFileA
InterlockedDecrement
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
RaiseException
GetModuleFileNameA
FormatMessageA
GetTickCount
MultiByteToWideChar
LocalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
lstrlenA

user32

GetMenuItemCount
RemoveMenu
GetMenuItemInfoA
CheckMenuItem
EnableMenuItem
GetWindowLongA
UnregisterClassA
InsertMenuItemA
SetWindowPlacement
FindWindowExA
CreatePopupMenu
GetCursorPos
DrawTextA
DrawStateA
CreateDialogParamA
LoadImageA
AnimateWindow
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoA
GetAncestor
CopyIcon
DestroyIcon
OffsetRect
PostMessageA
RegisterWindowMessageA
CreateAcceleratorTableA
DestroyAcceleratorTable
BeginPaint
EndPaint
ReleaseCapture
SetCapture
RedrawWindow
InvalidateRgn
GetSysColor
SetWindowContextHelpId
MapDialogRect
EndDialog
GetDC
GetSystemMetrics
DialogBoxIndirectParamA
SetFocus
DialogBoxParamA
GetWindowTextLengthA
GetWindowTextA
GetComboBoxInfo
FillRect
IsChild
GetForegroundWindow
ShowWindow
CharNextA
SetWindowsHookExA
GetFocus
CallNextHookEx
GetClassNameA
UnhookWindowsHookEx
EndMenu
MoveWindow
GetKeyState
ReleaseDC
GetWindowDC
ScreenToClient
ClientToScreen
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SetActiveWindow
GetDesktopWindow
IsWindowEnabled
EnableWindow
IsWindow
IsWindowVisible
CallWindowProcA
DefWindowProcA
CreateWindowExA
GetClassInfoExA
RegisterClassExA
DestroyWindow
LoadCursorA
KillTimer
SetTimer
SetWindowLongA
LoadStringA
LoadMenuA
GetSubMenu
SetMenuItemInfoA
TrackPopupMenu
SendMessageA
DestroyMenu
SetWindowTextA
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
GetParent
GetWindowPlacement
IsIconic
DrawFrameControl
UpdateWindow
SetWindowRgn
IsRectEmpty
PtInRect
SetRectEmpty
CopyRect
InflateRect
DrawIconEx
SetCursor
GetCapture
UnionRect
MessageBoxA
InvalidateRect

gdi32

StretchBlt
DPtoLP
LPtoDP
EqualRgn
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateRectRgn
GetClipBox
SetStretchBltMode
ExcludeClipRect
SetWindowOrgEx
FrameRgn
GetViewportOrgEx
SetViewportOrgEx
OffsetRgn
GetTextExtentPoint32A
RestoreDC
SaveDC
Polygon
CreatePen
SetTextColor
ExtTextOutA
GetPixel
GetTextColor
CreateFontIndirectA
GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SetBrushOrgEx
SetBkMode
SetBkColor
SelectObject
DeleteObject
CreatePatternBrush
CreateSolidBrush
GetTextMetricsA
DeleteDC

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumValueA
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteA

ole32

CoGetClassObject
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
RegisterDragDrop
OleUninitialize
OleInitialize
ReleaseStgMedium
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleLockRunning
CoUninitialize
CoInitialize
OleDraw
RevokeDragDrop
StringFromGUID2
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayUnlock
SafeArrayLock
SafeArrayCreate
SafeArrayDestroy
SysFreeString
VariantInit
VariantClear
VariantCopy
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SysStringByteLen
VarBstrCat
CreateErrorInfo
GetErrorInfo
LoadRegTypeLi
LoadTypeLi
DispCallFunc
SysStringLen
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
OleCreateFontIndirect
VariantChangeType
VarBstrCmp
SetErrorInfo

msimg32

TransparentBlt

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ImageList_GetIconSize
ImageList_Draw
ImageList_SetBkColor

snmpapi

SnmpUtilOidNCmp
SnmpUtilOidCpy
SnmpUtilVarBindFree

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 432KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

820ac6b4db2694fc3d8d126e4e59c1cd

Headers

File Characteristics

PDB Paths

Imports

wininet

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msimg32

comctl32

snmpapi

version

Exports

Exports

Sections

.text Size: 432KB - Virtual size: 430KB

.rdata Size: 108KB - Virtual size: 106KB

.data Size: 28KB - Virtual size: 112KB

.SHARED Size: 4KB - Virtual size: 8B

.rsrc Size: 156KB - Virtual size: 152KB

.reloc Size: 48KB - Virtual size: 46KB

.text
Size: 432KB - Virtual size: 430KB

.rdata
Size: 108KB - Virtual size: 106KB

.data
Size: 28KB - Virtual size: 112KB

.SHARED
Size: 4KB - Virtual size: 8B

.rsrc
Size: 156KB - Virtual size: 152KB

.reloc
Size: 48KB - Virtual size: 46KB