1214a77feb0516dd1c962f65bfb15e30_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1214a77feb0516dd1c962f65bfb15e30_JaffaCakes118
Size

284KB
MD5

1214a77feb0516dd1c962f65bfb15e30
SHA1

6992d4504f825e2879df768eca65b0930bf1f861
SHA256

725686bb6e7e6abf7f77a584414191a10996ce14eacac1d477a76420dc906cbd
SHA512

8728e703e8b946ae35f9b352e69334a01e353405b89a2bc0b3634a4dd3c41726c812036c4a471dc34309c7294dcf543700ae8490a1084a6e5ce65908785e502d
SSDEEP

6144:FxfRLac5zQDDNIIevdSdg3Kkn3Ln8ZqIaWVH9:bJLODpndg3Kkn3Ln8e+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1214a77feb0516dd1c962f65bfb15e30_JaffaCakes118

Files

1214a77feb0516dd1c962f65bfb15e30_JaffaCakes118
.dll windows:5 windows x86 arch:x86

6359c0b425524b6bca324785fdb48468

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFilePointer
GetLongPathNameW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetModuleHandleW
FreeLibrary
GetPrivateProfileStringW
MoveFileExW
GetEnvironmentVariableW
CompareStringW
GetLogicalDrives
CreateProcessW
FormatMessageW
MultiByteToWideChar
ExitProcess
GetModuleFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
Sleep
GetTickCount
RaiseException
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
DeleteFileW
SetHandleCount
GetFileType
SetStdHandle
HeapDestroy
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
HeapSize
HeapReAlloc
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ExitThread
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetCurrentThreadId
SetLastError
FlushInstructionCache
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
CloseHandle
lstrcmpiW
WideCharToMultiByte
CreateFileA
ReadFile
GetFileAttributesW
LeaveCriticalSection
EnterCriticalSection
lstrlenW
DeleteCriticalSection
SetEvent
CreateEventW
WaitForSingleObject
lstrlenA
OutputDebugStringW
DebugBreak
SetEnvironmentVariableW
GetLastError
CreateMutexW
GetProcAddress
LoadLibraryW
GetModuleFileNameW
WriteFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
GetStartupInfoA
CreateFileW
WinExec
QueryPerformanceCounter
GetDriveTypeW
InitializeCriticalSection
lstrcpyW
GetCurrentProcessId
lstrcatW

user32

EndPaint
BeginPaint
GetDlgItemTextW
SetDlgItemInt
GetDlgItemInt
SetActiveWindow
SetCapture
GetCapture
GetDlgCtrlID
EndDialog
SetRectEmpty
GetClassNameW
SetWindowTextW
OffsetRect
DestroyWindow
IsWindowVisible
SetTimer
PostMessageW
SetForegroundWindow
MonitorFromWindow
GetWindowRect
MapWindowPoints
SetWindowPos
GetWindowTextW
GetWindowTextLengthW
SetDlgItemTextW
MessageBeep
GetWindow
GetDlgItem
EnableWindow
AppendMenuW
CreatePopupMenu
GetParent
DeleteMenu
DrawFrameControl
DrawTextW
DrawFocusRect
PtInRect
GetSystemMetrics
ReleaseDC
GetDC
FillRect
GetSysColor
CopyRect
SetCursor
ReleaseCapture
KillTimer
UpdateWindow
SetFocus
GetFocus
CreateDialogParamW
IsWindow
CharNextW
wvsprintfW
CreateWindowExW
LoadCursorW
GetClassInfoExW
RegisterClassExW
GetActiveWindow
LoadBitmapW
ShowWindow
GetClientRect
CallWindowProcW
GetWindowLongW
GetMonitorInfoW
MonitorFromPoint
GetSubMenu
TrackPopupMenu
LoadMenuW
DefWindowProcW
ScreenToClient
GetCursorPos
DestroyMenu
SendMessageW
SetWindowLongW
DialogBoxParamW
InvalidateRect
LoadStringW
wsprintfW
CharUpperBuffW
MessageBoxW
IsWindowEnabled
UnregisterClassA

gdi32

GetStockObject
GetObjectW
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPoint32W
Rectangle
LineTo
MoveToEx
GetClipBox
SetTextColor
SetBkColor
SelectObject
ExtTextOutW
DeleteDC
CreateSolidBrush
CreatePen
DeleteObject
SetBkMode

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCreateKeyExW
RegCloseKey
RegOpenKeyW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegEnumValueW
RegSetValueExW

shell32

SHGetFileInfoW
ShellExecuteW
SHCreateDirectoryExW
DragQueryFileW
SHChangeNotify
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW

ole32

StringFromGUID2
CoCreateInstance

oleaut32

SysAllocString
VarBstrCat
SysStringLen
SysFreeString

shlwapi

StrCmpNIW
PathFileExistsW
PathAppendW
PathAddBackslashW

comctl32

ImageList_DrawEx
DestroyPropertySheetPage
ImageList_GetIconSize
ImageList_DragLeave
ImageList_EndDrag
ImageList_Draw
_TrackMouseEvent
CreatePropertySheetPageW

Exports

Exports

QueryInterface
_NEW_00_KSINI@0
_NEW_00_QTDLL@0
_NEW_KSINI@0
_NEW_QTDLL@0

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6359c0b425524b6bca324785fdb48468

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 175KB

.code Size: 14KB - Virtual size: 13KB

.rdata Size: 38KB - Virtual size: 38KB

.data Size: 9KB - Virtual size: 18KB

.rsrc Size: 29KB - Virtual size: 28KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 176KB - Virtual size: 175KB

.code
Size: 14KB - Virtual size: 13KB

.rdata
Size: 38KB - Virtual size: 38KB

.data
Size: 9KB - Virtual size: 18KB

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 16KB - Virtual size: 16KB