25e5da5bd6793fe4df2fedb27a5b8935_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

25e5da5bd6793fe4df2fedb27a5b8935_JaffaCakes118
Size

254KB
MD5

25e5da5bd6793fe4df2fedb27a5b8935
SHA1

52104f18e0503d6222780c2df33091273e4c4c26
SHA256

95be3b199732dd1ff3cf422f8160179a1b792a46d8da87119835579ce06e551e
SHA512

48f737e9db4da8dda88ac3be245b294d35c110976e962ccbf820a02ae9718a318d794d24ea82325bdf7a48ce706c797c1cf00df82b488e3af43702660068bbfe
SSDEEP

6144:c1LAPABQETglUImz0vbvheqUyBrY0NMET:cmAGkag0v9VT3T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25e5da5bd6793fe4df2fedb27a5b8935_JaffaCakes118

Files

25e5da5bd6793fe4df2fedb27a5b8935_JaffaCakes118
.dll windows:6 windows x86 arch:x86

70a02a3f9b08a398ef82bff3e7521004

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

mxdwdui.pdb

Imports

user32

GetActiveWindow
SendMessageW
GetParent
IsDlgButtonChecked
CheckDlgButton
ShowWindow
LoadStringW
GetDlgItem

ntdll

RtlUnwind

kernel32

GetConsoleMode
GetConsoleCP
SetFilePointer
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
SetLastError
HeapAlloc
GetVersionExW
GetLastError
lstrcmpiW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetSystemDirectoryW
GetModuleFileNameW
LockResource
LoadResource
FindResourceW
GetCommandLineA
GetVersionExA
HeapFree
RaiseException
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
SetStdHandle
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
CloseHandle
HeapSize
WriteFile
OutputDebugStringA
LoadLibraryA
InitializeCriticalSection
GetModuleHandleW
GetCPInfo
GetACP
GetOEMCP
Sleep
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CreateFileMappingW
SearchPathW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
UnmapViewOfFile
GetTickCount
HeapReAlloc
FindResourceExW
LoadLibraryExW
MapViewOfFile
CreateFileW

advapi32

RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

winspool.drv

GetPrinterW

ole32

CoTaskMemFree

gdi32

ExtEscape

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70a02a3f9b08a398ef82bff3e7521004

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

ntdll

kernel32

advapi32

winspool.drv

ole32

gdi32

Exports

Exports

Sections

.text Size: 86KB - Virtual size: 85KB

.data Size: 64KB - Virtual size: 71KB

.rsrc Size: 95KB - Virtual size: 96KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 86KB - Virtual size: 85KB

.data
Size: 64KB - Virtual size: 71KB

.rsrc
Size: 95KB - Virtual size: 96KB

.reloc
Size: 7KB - Virtual size: 7KB