0c342525ef1946b43a1b4eec3d174f68_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0c342525ef1946b43a1b4eec3d174f68_JaffaCakes118
Size

200KB
MD5

0c342525ef1946b43a1b4eec3d174f68
SHA1

00271d9be622cf30f1fb15a3a80dad53cf7c022d
SHA256

515890ce3e3b6250e2de5458bebcb82eda557afa35087acaf80e2dfede75b484
SHA512

4f22b331a9ba4c92ec2543eb030cadb83ea5a5f121212f9e9871e414f0718f7856f24e111f79ffb131529b58c33e2efdb9253257f2e496453363d598d3d233b3
SSDEEP

3072:tiJuBXB3YfPUHp3SaKHRXlijZIT/LhYyd7WW9/Kb6IB5vtP8rLLf/tlHJgK6qep6:tuUpSa2l4ZITThYyRb9/K2IPFPI1vgu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c342525ef1946b43a1b4eec3d174f68_JaffaCakes118

Files

0c342525ef1946b43a1b4eec3d174f68_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f0382eb58b16920eb6e939d50f846a78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
ExitProcess
lstrcpyW
VirtualAlloc

user32

CascadeChildWindows
CharUpperA
DrawTextExW
EnableMenuItem
EnumDisplaySettingsW
GetDlgItemTextA
GetMenuItemInfoW
GetSystemMenu
GrayStringW
LoadMenuW
PostMessageA
RegisterClassW
TrackPopupMenu
UnregisterClassW
CharLowerBuffW

comdlg32

ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA

advapi32

RegOpenKeyW

ole32

OleDraw
OleDuplicateData
OleGetClipboard
OleInitialize
OleInitializeWOW
OleLoad
OleUninitialize
ProgIDFromCLSID
PropStgNameToFmtId
ReadClassStg
ReadOleStg
RegisterDragDrop
ReleaseStgMedium
SNB_UserMarshal
STGMEDIUM_UserMarshal
StgCreateDocfileOnILockBytes
StgCreatePropSetStg
StgGetIFillLockBytesOnILockBytes
StgOpenPropStg
StgSetTimes
UpdateDCOMSettings
WriteClassStg
WriteClassStm
WriteFmtUserTypeStg
WriteOleStg
HMETAFILE_UserFree
HMENU_UserMarshal
HGLOBAL_UserFree
HENHMETAFILE_UserUnmarshal
HENHMETAFILE_UserMarshal
HDC_UserUnmarshal
HDC_UserFree
OleDoAutoConvert
HACCEL_UserUnmarshal
GetHGlobalFromILockBytes
GetDocumentBitStg
GetConvertStg
GetClassFile
EnableHookObject
CreatePointerMoniker
CreateOleAdviseHolder
CreateILockBytesOnHGlobal
CreateAntiMoniker
CoUnmarshalInterface
CoUninitialize
CoTestCancel
CoSwitchCallContext
CoResumeClassObjects
CoReleaseServerProcess
CoImpersonateClient
CoGetTreatAsClass
CoGetStdMarshalEx
CoGetInstanceFromIStorage
CoGetCurrentLogicalThreadId
CoGetClassObject
CoGetCancelObject
CoGetCallerTID
CoGetCallContext
CoFreeLibrary
CoFreeAllLibraries
CoCreateInstance
CoCreateGuid
CoCancelCall
CoBuildVersion
CLSIDFromString
CLIPFORMAT_UserUnmarshal
BindMoniker
OleCreateStaticFromData
OleCreateMenuDescriptor
OleCreateLinkToFileEx
OleCreateLinkFromDataEx
OleCreateLinkEx
OleCreateFromFileEx
OleCreateFromDataEx
OleCreateFromData
OleConvertIStorageToOLESTREAMEx
HMETAFILE_UserMarshal
MkParseDisplayName
HWND_UserFree
HPALETTE_UserSize
HPALETTE_UserMarshal
HBRUSH_UserUnmarshal
HPALETTE_UserFree
OleConvertIStorageToOLESTREAM

comctl32

CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindow
ord6
ord7
CreateToolbarEx
_TrackMouseEvent
UninitializeFlatSB
ord3
PropertySheetW
PropertySheetA
PropertySheet
ord2
ord13
InitializeFlatSB
InitMUILanguage
InitCommonControlsEx
ord17
ImageList_Write
ImageList_SetImageCount
ImageList_SetIconSize
CreatePropertySheetPage
ord15
DrawStatusText
DrawStatusTextW
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_GetScrollRange
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
FlatSB_ShowScrollBar
ord4
GetMUILanguage
ImageList_Add
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragLeave
ImageList_DragMove
ImageList_Draw
ImageList_DrawEx
ord8
ImageList_SetFilter
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Remove
ImageList_Merge
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_LoadImage
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_EndDrag
ImageList_DrawIndirect

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text3
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0382eb58b16920eb6e939d50f846a78

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

comctl32

Sections

.text Size: 188KB - Virtual size: 187KB

.data Size: 512B - Virtual size: 56B

.text4 Size: 1024B - Virtual size: 1000B

.text3 Size: 2KB - Virtual size: 2KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 188KB - Virtual size: 187KB

.data
Size: 512B - Virtual size: 56B

.text4
Size: 1024B - Virtual size: 1000B

.text3
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 2KB - Virtual size: 1KB