0eb50f5ce343556a71f9614e4639a93e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0eb50f5ce343556a71f9614e4639a93e_JaffaCakes118
Size

43KB
MD5

0eb50f5ce343556a71f9614e4639a93e
SHA1

30cae385d3012495a71a38ad545734023ac2d898
SHA256

16a19de097992d99cd4979e40a9cea7902a78c56405f4ed792086fc93294cfd9
SHA512

aff9da05322d7363c54dcf878c3cb30ea6c94901912f6a2f2b5799c55b3296f9f912dac2d5eab2bd538dad127ad0af7a545a8b15805f41461d444903e31747a5
SSDEEP

768:ls0raflA2PVbp28Y2Vfmgm4ZHFREay4+XSXhNq2kVqhK27JH:ij62Nd2Imgm4ZManxk2XhKkJH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eb50f5ce343556a71f9614e4639a93e_JaffaCakes118

Files

0eb50f5ce343556a71f9614e4639a93e_JaffaCakes118
.dll windows:5 windows x86 arch:x86

fff419a9a4fe79dd7c4dfb62e25d9e3c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalReAlloc
GlobalUnlock
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalUnlock
MulDiv
MultiByteToWideChar
OpenFile
QueryPerformanceCounter
SetFileAttributesA
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
GlobalLock
WaitForSingleObject
WideCharToMultiByte
_lclose
_lcreat
_llseek
_lopen
_lread
_lwrite
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
VirtualAlloc
ReadFile
GlobalHandle
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemTime
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLastError
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
GetAtomNameA
GetACP
FindFirstFileA
FindClose
ExitProcess
DeleteFileA
DeleteAtom
CreateThread
CreateProcessW
CloseHandle
UnhandledExceptionFilter
AddAtomA

user32

GetSysColor
GetSysColorBrush
GetSystemMetrics
GetTopWindow
GetWindowDC
InsertMenuA
InvalidateRect
IsClipboardFormatAvailable
IsDlgButtonChecked
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringA
MessageBoxA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetCapture
SetClipboardData
SetCursor
SetDlgItemTextA
SetFocus
SetRect
SetRectEmpty
SetScrollPos
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TranslateAcceleratorA
TranslateMessage
UpdateWindow
GetSubMenu
GetScrollRange
GetScrollPos
GetMessageA
GetMenu
GetKeyState
GetDlgItemTextA
GetDlgItem
GetClipboardData
GetClientRect
FillRect
EnumThreadWindows
EndPaint
EndDialog
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawIcon
DrawFocusRect
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CloseClipboard
CheckRadioButton
CheckDlgButton
CharUpperBuffA
CharNextA
CharLowerA
BringWindowToTop
BeginPaint
GetDC

gdi32

SetTextAlign
TextOutA
SetWindowOrgEx
SetWindowExtEx
SetTextColor
SetLayout
SetBkMode
SetBkColor
SelectObject
PatBlt
GetTextExtentPoint32A
TranslateCharsetInfo
CloseMetaFile
GetLayout
GetDeviceCaps
DeleteObject
CreateMetaFileA
CreateFontIndirectA
CopyMetaFileA
GetStockObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegSetValueA

shell32

ShellAboutA
ExtractAssociatedIconA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteExA

wininet

CreateUrlCacheEntryA
DeleteUrlCacheEntry
CommitUrlCacheEntryA

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_vsnprintf
exit
memmove
strchr

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fff419a9a4fe79dd7c4dfb62e25d9e3c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

wininet

msvcrt

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 168B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 135KB - Virtual size: 134KB

.rsrc Size: 27KB - Virtual size: 26KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 168B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 135KB - Virtual size: 134KB

.rsrc
Size: 27KB - Virtual size: 26KB

.reloc
Size: 1KB - Virtual size: 1KB