11bbdd4a9680ae410a2ff53608ddef6d_JaffaCakes118

General

Target
11bbdd4a9680ae410a2ff53608ddef6d_JaffaCakes118
Size 148KB
Sample241004-ehcgtstanm
SHA256 21475aa008cd334f747a2933b2ac3aadae4ba11bfacdb296663a92e8622fe55a
MD5 11bbdd4a9680ae410a2ff53608ddef6d
SHA1 f074fa890b73d40f831dc055aed7ab1bac03a923
SHA512 b03ee60492d819b899d9c0773e1dc92e2cf146869e1eb96d8c41319cb3e2d2ae1ecf1b83b1da558b542e9404e8aadb6ae54cfc8428975e55c2d82ae6e62bf1b8
SSDEEP 3072:uQTEWTo0qWBGtMwfxEHOxqaIE7P6fAaYmAnuB8xaAX7d:uCToPWBQDj+Kmoza
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11bbdd4a9680ae410a2ff53608ddef6d_JaffaCakes118

File Explorer

11bbdd4a9680ae410a2ff53608ddef6d_JaffaCakes118

.dll 148KB

11bbdd4a9680ae410a2ff53608ddef6d_JaffaCakes118

IMPHASH dbd31fbdbb5fb7c0ae1cb3529d2a31f7
SHA256 21475aa008cd334f747a2933b2ac3aadae4ba11bfacdb296663a92e8622fe55a
MD5 11bbdd4a9680ae410a2ff53608ddef6d
SHA1 f074fa890b73d40f831dc055aed7ab1bac03a923
SHA512 b03ee60492d819b899d9c0773e1dc92e2cf146869e1eb96d8c41319cb3e2d2ae1ecf1b83b1da558b542e9404e8aadb6ae54cfc8428975e55c2d82ae6e62bf1b8
SSDEEP 3072:uQTEWTo0qWBGtMwfxEHOxqaIE7P6fAaYmAnuB8xaAX7d:uCToPWBQDj+Kmoza
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrlenA LoadLibraryA WriteFile VirtualAlloc CreateThread CreateEventA SetEvent _llseek GetLastError GetProcAddress CloseHandle GetPrivateProfileIntA FreeResource LockResource LoadResource FindResourceA _lread _lclose DeleteFileA CreateFileA GetVersion lstrcmpA GlobalReAlloc GlobalUnlock GetTickCount GlobalHandle GlobalLock GlobalAlloc GlobalSize ResetEvent GlobalFree WaitForSingleObject

user32

ReleaseCapture GetWindowRect GetDlgCtrlID GetCursorPos GetSystemMetrics FillRect GetSysColor DefWindowProcA PeekMessageA GetQueueStatus DispatchMessageA TranslateMessage SetDlgItemTextA GetDlgItemTextA SendDlgItemMessageA MessageBeep GetWindowTextA SetFocus GetDlgItem SetWindowPos GetDesktopWindow ClientToScreen IsWindow MoveWindow SendMessageA ScreenToClient GetActiveWindow EndDialog DialogBoxIndirectParamA GetDialogBaseUnits DrawTextA DrawFocusRect InflateRect LoadStringA BeginPaint GetDC EndPaint ReleaseDC InvalidateRect UpdateWindow SetRect GetClientRect GetWindowLongA SetPropA RemovePropA GetPropA UnregisterClassA LoadCursorA RegisterWindowMessageA RegisterClassA GetAsyncKeyState IntersectRect MessageBoxA GetParent SetCapture

gdi32

DeleteObject BitBlt DeleteDC CreateCompatibleBitmap CreateCompatibleDC SelectObject MoveToEx CreateSolidBrush LineTo SetBkColor SetBkMode ExtTextOutA CreatePen SetTextColor RoundRect

msvcrt

strtol _ltoa rand strncpy

AboutDlgProc AllocPointer AllocSlider AngleFromSlope BlockMove BlockMoveData BufferedDraw CalcProxyRect CalcProxyRectCore CenterWindow CentreDialog CheckProxiesSupported DefPaintBack DefPlotThumb DeinitializePIExpressDialogs DisposPtr DisposeHandle DisposePtr DoYield DragThumb DrawSmallButton DrawTheSmallButton DrawTicksBack DupHandle EditFail EmptyRect FSClose FSRead FSWrite FSpCreate FSpDelete FSpOpenDF Fix2Frac Fix2Long Fix2X FixATan2 FixDiv FixHypot FixMul FixRatio FixRound FixSqrt Frac2Fix Frac2X FracCos FracDiv FracHypot FracMul FracSin FracSqrt FreePointer FreeSlider GetDlgItemRect GetEOF GetFPos GetHandleSize GetIndString GetIndStringPreferred GetSliderPos GetSliderRange GetThumbRect HLock HUnlock HandFromPtr HostAddPIResource HostAllocateBuffer HostAllocateStripBuffer HostBufferProcsAvailable HostBufferSpace HostCountPIResources HostDeletePIResource HostDisposeHandle HostFreeBuffer HostGetHandleSize HostGetPIResource HostHandleProcsAvailable HostLockBuffer HostLockHandle HostNewHandle HostResourceProcsAvailable HostSetHandleSize HostUnlockBuffer HostUnlockHandle Hypot InitCursor InitEditWnd InitHypotTable InitializePIExpressDialogs Interpolate1D Interpolate1DMulti Interpolate2D Interpolate2DMulti InvalThumbRect LockSliderData Long2Fix Long2X LongHypot LongMul LongSqrt MacToWinRect MapRect MemError MoveHHi NewCalcProxyRect NewHandle NewHandleClear NewPtr NewPtrClear Num2Comp NumToString OutputMessage PIDMDisposeDialog PIDMExpressHandleDialog PIDMExpressResDialog PIDMGetControl PIDMGetControlIndex PIDMGetMacDialog PIDMModalDialog PIDMNewHandleDialog PIDMNewResDialog PIDMWinExpressDialog PIExpressDialogsAvailable PIInsetRect PIOffsetRect PIPtInRect PIQuickZResToCString PIQuickZResToPascalString PIQuickZToCString PIQuickZToCStringLen PIQuickZToPascalString PIQuickZToPascalStringLen PISetRect PIThreadsDoAll PIThreadsEndThreads PIThreadsGetNumThreads PIThreadsGetParamsPtr PIThreadsInit PIThreadsStart1 PIThreadsWaitForCompletion PIZGetIndString PIZGetIndStringPreferred PIZLoadString PIZNoteAlert PIZStopAlert PackBits PaintSlider ParamText Random RegisterSlider RestoreA4 SectRect SetFPos SetHandleSize SetSliderData SetSliderFlags SetSliderMax SetSliderMin SetSliderPos SetSliderProc SetSliderRange SetSliderThumbOff SetSliderThumbSize ShortHypot ShortMul ShowAlert ShowOutputBuffer SliderWndProc SlopeFromAngle SnapToLogPos TickCount TranslatePos TruncateFileName UnRegisterSlider UnlockSliderData UnpackBits UserChangedEditText UserInputAvail UtilReadDescriptors UtilReadPlatformFilePathDescriptor UtilReadPointDescriptor UtilReadPointListDescriptor UtilWriteDescriptors UtilWriteNoDescForceUI UtilWritePlatformFilePathDescriptor UtilWritePointDescriptor UtilWritePointListDescriptor ValidateDlgLong WAllocBuffer WFreeBuffer WSizeBuffer WarnHostAdvanceStateAvailable WarnHostBufferProcsAvailable WarnHostHandleProcsAvailable WarnHostResourceProcsAvailable WinToMacRect X2Fix X2Frac X2Long map_one map_to_logical map_to_physical

Sharing

General

Malware Config

Signatures

File Explorer

11bbdd4a9680ae410a2ff53608ddef6d_JaffaCakes118

kernel32

user32

gdi32

msvcrt

generic