11f89d366f88976aa431efa7c2b33a90_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

11f89d366f88976aa431efa7c2b33a90_JaffaCakes118
Size

341KB
MD5

11f89d366f88976aa431efa7c2b33a90
SHA1

f2568b06fa66fb1bd99c05bdc061f793efaf670f
SHA256

0111efe87717fc1557127846ebd754731003cded3035779d57915f7baeed860e
SHA512

d5b9f259fe22bf6143a0eb3082557b93e68707c2d4638e74910abcfd29d72749c806083d51b07688370ccb316a429ace6bf3b5618b873792f4ccf599f0676a8a
SSDEEP

6144:xV89kqcE4NcqtifJjMszlcEpedcVVZZfSbGqbSbGq:xV8yRE4C3xgszeEpedcVV/S9S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f89d366f88976aa431efa7c2b33a90_JaffaCakes118

Files

11f89d366f88976aa431efa7c2b33a90_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2016e95392dad598b700d021a9c84356

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
GlobalUnlock
CreateFileW
VirtualAllocEx
GetWindowsDirectoryW
lstrcatW
lstrcatA
CloseHandle
GetProcAddress
GetModuleHandleA
OpenEventA
Sleep
GetLastError
FreeLibrary
CompareStringA
GetVersionExA
CreateProcessA
GetSystemDirectoryA
OpenProcess
GetCurrentProcessId
CreateEventA
GetTickCount
SetEvent
SetConsoleCtrlHandler
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrcpyA
GetComputerNameA
lstrlenA
SetCurrentDirectoryA
AddAtomA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcpynA
LoadLibraryExA
InterlockedIncrement
GetModuleFileNameA
GetStartupInfoA
lstrlenW
lstrcpynW
GetPrivateProfileIntW
LoadLibraryA

user32

SetClipboardViewer
SendMessageA
InvalidateRect
BeginPaint
GetClientRect
OpenClipboard
GetClipboardData
DrawTextA
CloseClipboard
EndPaint
ChangeClipboardChain
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
SetCursor
LoadCursorW
ShowCursor
FlashWindow
SetTimer
KillTimer
LoadBitmapW
CreateWindowExW
LoadStringW
GetSystemMetrics
SystemParametersInfoW
MessageBoxW
MessageBeep
ReleaseDC
GetDC
DefWindowProcW
GetDesktopWindow
DialogBoxParamW
EnableMenuItem
GetMenu
SendMessageW
PostMessageW
SetCapture
ReleaseCapture
DrawMenuBar
RegisterClassW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
EndDialog
GetDlgItem
SetWindowPos
GetWindowRect
WinHelpW
SetDlgItemInt
GetDlgItemInt
SetWindowTextW
wsprintfW
GetSysColor
GetWindowDC
IsIconic
SetForegroundWindow
GetForegroundWindow
CreateWindowExA
GetSubMenu
LoadMenuA
GetCursorPos
SetFocus
RegisterClassA
SystemParametersInfoA
TrackPopupMenuEx
RemoveMenu
DestroyMenu
DestroyWindow
DestroyIcon
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
LoadStringA
CharNextA
wsprintfA

gdi32

GetStockObject
StretchBlt
BitBlt
SetBkColor
SetRectRgn
GetTextExtentPoint32W
SetTextColor
TextOutW
SetPixel
CreateRectRgn
GetPixel
GetTextMetricsW
GetDeviceCaps
CombineRgn
CreatePen
CreateSolidBrush
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
PatBlt
CreateFontIndirectW
DeleteDC
LineTo
MoveToEx
CreateICW

msvcrt

_adjust_fdiv
_c_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
exit
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_acmdln
isdigit
time
srand
rand

advapi32

RegOpenKeyExA
RegCreateKeyA
RegOpenKeyA
RegisterEventSourceA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
DeregisterEventSource
ReportEventA
RegDeleteValueA
RegFlushKey
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
DeleteService
OpenSCManagerA
RegQueryValueExA
SetServiceStatus
CloseServiceHandle
ChangeServiceConfigA
QueryServiceStatus
ControlService
OpenServiceA
CreateServiceA
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW

shell32

Shell_NotifyIconA

ole32

CoInitialize
CoGetClassObject
CoUninitialize

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 249KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2016e95392dad598b700d021a9c84356

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

shell32

ole32

Sections

.text Size: 25KB - Virtual size: 25KB

.data Size: 249KB - Virtual size: 249KB

.data3 Size: 14KB - Virtual size: 14KB

.rdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 25KB - Virtual size: 25KB

.data
Size: 249KB - Virtual size: 249KB

.data3
Size: 14KB - Virtual size: 14KB

.rdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 1KB - Virtual size: 1KB