27204c2c7ae679d926f824894648f100_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

27204c2c7ae679d926f824894648f100_JaffaCakes118
Size

264KB
MD5

27204c2c7ae679d926f824894648f100
SHA1

45f4d212769b99f8e3cc6feac4cf11e84a96aef5
SHA256

132bd0efd1096e38b5ac9d3b14b6413a4a362a081f7189bda310ad51589a738a
SHA512

7a220b7a2d967b0bc76675c0a95c8c2639830bc09bf8934078e273569a23a77426d51d2d868ac0b225ef05542c11c2460825d3aee94143c868310515bb494db5
SSDEEP

6144:vJr8O0lg/IKcVJwjA6B3XEeJnNuivUgEVLL+S:xr8O0l3Kc80GNuivUfVLCS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27204c2c7ae679d926f824894648f100_JaffaCakes118

Files

27204c2c7ae679d926f824894648f100_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ecbff9a778bcf60e628433293dbc22be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueA
RegSetValueExA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc

gdi32

GetPaletteEntries
Arc
BitBlt
CombineRgn
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateEllipticRgn
CreateHatchBrush
CreatePalette
CreatePatternBrush
CreatePen
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DPtoLP
DeleteDC
DeleteEnhMetaFile
DeleteMetaFile
DeleteObject
Ellipse
Escape
FillRgn
FrameRgn
GetClipRgn
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetMapMode
GetObjectA
GetObjectType
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
LineTo
MoveToEx
Pie
PlayEnhMetaFile
PlayMetaFile
PolyBezier
Polygon
PtInRegion
RealizePalette
Rectangle
RoundRect
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBitsToDevice
SetEnhMetaFileBits
SetMapMode
SetMetaFileBitsEx
SetROP2
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWinMetaFileBits
SetWindowExtEx
SetWindowOrgEx
StretchBlt
StretchDIBits
TextOutA

user32

wvsprintfA
wsprintfA
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TrackPopupMenuEx
ShowWindow
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetTimer
SetScrollInfo
SetRectEmpty
SetRect
SetFocus
SetDlgItemTextA
SetDlgItemInt
SetCursorPos
SetCursor
SetCapture
SendMessageA
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterClassExA
PtInRect
PostThreadMessageA
PostMessageA
PeekMessageA
OpenClipboard
MoveWindow
MessageBoxA
MapWindowPoints
LoadCursorA
KillTimer
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsClipboardFormatAvailable
InvalidateRgn
InvalidateRect
IntersectRect
GetWindowRect
GetWindowLongA
GetSystemMetrics
GetScrollInfo
GetParent
GetKeyState
GetFocus
GetDesktopWindow
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassInfoExA
GetCapture
GetActiveWindow
FillRect
EnumChildWindows
EndPaint
EndDialog
EnableWindow
EmptyClipboard
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyCaret
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CreateCaret
CopyRect
CloseClipboard
ClientToScreen
CharNextA
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
AppendMenuW
AppendMenuA
SetClipboardData

comctl32

PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

kernel32

lstrcmpiA
lstrcmpA
lstrcpyA
WideCharToMultiByte
WaitForMultipleObjects
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetStdHandle
SetLastError
SetHandleCount
SetFilePointer
SetEvent
SetEndOfFile
RtlUnwind
ResumeThread
ResetEvent
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
MultiByteToWideChar
MapViewOfFile
LockResource
LocalUnlock
LocalLock
LocalFree
LocalAlloc
LoadResource
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsDBCSLeadByte
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetVersion
GetTimeFormatA
GetTickCount
GetThreadLocale
GetTempPathA
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryA
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
lstrcpynA
lstrlenA
lstrlenW
WriteFile
CloseHandle
CreateEventA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateThread
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
ExitProcess
FileTimeToSystemTime
FindFirstFileA
FindResourceA
FindResourceExA
FlushFileBuffers
FlushInstructionCache
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileSize
GetFileType
GetLastError
GetLocaleInfoA

Exports

Exports

BindTexture2D
CreateImagePropBuffer
DVDMRWVRFinalizeDisc
EnumBaseImageDataPropertyRelease
EnumBaseImageDataPropertyReset
EnumFlashSettingNext
EnumItemRelease
EnumMCCustomSetNumberNext
EnumRelCamSettingDataReset
GetFunctions_i
GetImageItemProperty
GetNumHarddisks
GetRAWDevelopFaculties
ImportDataTrack
IsSupportParamValue
Malloc
MallocHost
MemcpyFromSymbol
Memset3D
SetDoubleForHost
WriteDevParamToRAW

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecbff9a778bcf60e628433293dbc22be

Headers

File Characteristics

Imports

advapi32

ole32

gdi32

user32

comctl32

kernel32

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 168KB

.data Size: 84KB - Virtual size: 112KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 168KB - Virtual size: 168KB

.data
Size: 84KB - Virtual size: 112KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB