15367fde698eabe27bc0246fa7dbdb01_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

15367fde698eabe27bc0246fa7dbdb01_JaffaCakes118
Size

276KB
MD5

15367fde698eabe27bc0246fa7dbdb01
SHA1

de750c0dd59d00ba2958d5a78d094abd3d2963d1
SHA256

76acc9ad78c9b8bdb4dc4fbc17577c70efeab108442a5711cfb409030ea01c5a
SHA512

d2393665d84a73af695cd01f6b4233003839639f9e074121956c95fa57b30caeb242aec8b7543199b3431681f6b0a8dcf2c75067c1c4cf8569437889b667b17d
SSDEEP

6144:y2TKv5ukFs45Oi5GDVNlImCXDFFeGnTBmSaJ:y3Uf4sVNOaGnTI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15367fde698eabe27bc0246fa7dbdb01_JaffaCakes118

Files

15367fde698eabe27bc0246fa7dbdb01_JaffaCakes118
.dll regsvr32 windows:5 windows x86 arch:x86

268d8f125dbe34d2edf21078dc42a0de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetCrackUrlA
InternetConnectA
InternetReadFile
HttpOpenRequestA
InternetGetConnectedState
HttpSendRequestA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA

shlwapi

StrCmpNIA
wnsprintfA
StrStrA
StrStrIA
StrToIntA
StrCmpNA
StrNCatA
PathFindExtensionA
PathFindFileNameA

rpcrt4

UuidCreate
UuidToStringA

kernel32

WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
CreateFileA
GetCPInfo
GetOEMCP
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetCommandLineA
RtlUnwind
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
GetACP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
WritePrivateProfileStringA
GlobalFlags
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
SetErrorMode
TlsFree
LocalReAlloc
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFree
GlobalUnlock
FormatMessageA
LocalFree
GetModuleFileNameW
GlobalAddAtomA
SetLastError
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
CompareStringA
InterlockedExchange
GlobalLock
GlobalAlloc
LockResource
GetVersionExA
HeapReAlloc
GetCurrentProcessId
lstrcpyA
CreateThread
CloseHandle
ReleaseMutex
GetCurrentThreadId
CreateMutexA
Sleep
TlsSetValue
GetProcessHeap
GetTickCount
WaitForSingleObject
HeapFree
InterlockedDecrement
InterlockedIncrement
HeapAlloc
lstrcpynA
TlsGetValue
lstrcmpA
TlsAlloc
DeleteCriticalSection
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
EnterCriticalSection
GetProcAddress
lstrcmpiA
GetLastError
RaiseException
lstrlenW
MultiByteToWideChar
IsDBCSLeadByte
LeaveCriticalSection
SizeofResource
WideCharToMultiByte
InitializeCriticalSection
GetModuleHandleW
LoadResource
FreeLibrary
lstrlenA
FindResourceA

user32

DestroyMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetDC
ReleaseDC
GetSysColorBrush
ClientToScreen
ShowWindow
SetWindowTextA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetWindowTextA
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
UnregisterClassA
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
SetCursor
PostMessageA
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
SendMessageA
SetTimer
KillTimer
CharNextW
CharNextA

gdi32

SetMapMode
GetStockObject
RestoreDC
SaveDC
DeleteObject
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA

ole32

CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc

oleaut32

SysAllocString
VariantChangeType
VariantInit
SysStringLen
LoadTypeLi
UnRegisterTypeLi
VarUI4FromStr
RegisterTypeLi
SysFreeString
LoadRegTypeLi
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

268d8f125dbe34d2edf21078dc42a0de

Headers

File Characteristics

Imports

wininet

shlwapi

rpcrt4

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 163KB - Virtual size: 162KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 10KB - Virtual size: 25KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 31KB - Virtual size: 30KB

.text
Size: 163KB - Virtual size: 162KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 10KB - Virtual size: 25KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 31KB - Virtual size: 30KB