24dbf56a907214866b133fc75e74d2cd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

24dbf56a907214866b133fc75e74d2cd_JaffaCakes118
Size

291KB
MD5

24dbf56a907214866b133fc75e74d2cd
SHA1

08d0c225f1ddbdfb08a3edb28d8a32b3e84daace
SHA256

4ad4a2d11aec5c700641dccd9c918eddffb3a3b989a712f5e299c713864986b5
SHA512

f1e240437116b30e5fb7212af06fc037c0fcb4e460b26593781ccb266d5a8960f4a9071a9693299b25d42de9de01a506bace76b9818770889e8f9f54fffd8384
SSDEEP

6144:MekRLKBoOAI0+8/Isk+wqPOYwoZ7H1iH9a0PJH5m0XWHGwCI0+/HPl3Nwn+RB:MeYKNAI0+8/MYPfRZb1iH8YJH5XI0+/5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24dbf56a907214866b133fc75e74d2cd_JaffaCakes118

Files

24dbf56a907214866b133fc75e74d2cd_JaffaCakes118
.dll windows:5 windows x86 arch:x86

c3824fe70b0d57b1921901641dc4e4de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcsrchr
_snwprintf
_wopen
_fstat
_close
_wctime
wcsncat
wcschr
wcstoul
wcsstr
sscanf
atol
sprintf
atoi
mbstowcs
wcsncpy
_wtoi
wcstombs
_except_handler3
wcscmp
swprintf
_purecall
_snprintf
strrchr
strchr
_vsnprintf
strstr
setlocale
wcsncmp
_wcsicmp
iswdigit
localtime
_wcsupr
strncpy
strncmp
memmove
mktime
time
_stricmp
toupper
_splitpath
swscanf
strtok
wcscat
_wsplitpath
wcslen
wcscpy
malloc
_adjust_fdiv
_initterm
_wmakepath
free

kernel32

lstrcmpA
lstrcpynA
GetWindowsDirectoryW
GetSystemDirectoryW
lstrcpyW
GetACP
FindResourceW
LoadResource
LockResource
FreeResource
GlobalAlloc
GlobalFree
MulDiv
GetComputerNameW
OutputDebugStringA
VerSetConditionMask
GlobalUnlock
SetLastError
IsBadWritePtr
GetVersion
GetFileAttributesW
TerminateProcess
GetModuleHandleA
LoadLibraryA
GetLocalTime
GetTempPathW
lstrcatW
CreateFileW
SetFilePointer
lstrlenA
WriteFile
CloseHandle
InitializeCriticalSection
HeapCreate
LoadLibraryW
GetLastError
GetProcAddress
HeapDestroy
DeleteCriticalSection
FreeLibrary
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
GetCurrentProcess
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SizeofResource
IsValidCodePage
GetPrivateProfileSectionA
CreateFileA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedIncrement
InterlockedDecrement
Sleep
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileMappingW
GetModuleHandleW
GlobalHandle
lstrcpyA
GlobalLock
VerifyVersionInfoW
OpenFile
EnterCriticalSection
GetComputerNameA
IsDBCSLeadByte
IsDBCSLeadByteEx
GetVersionExA

user32

CallWindowProcW
RemovePropW
ReleaseDC
DrawTextW
GetDC
LoadStringW
wsprintfA
SetDlgItemTextA
SetWindowLongW
GetWindowLongW
MessageBoxW
SetDlgItemTextW
DestroyWindow
FindWindowExW
SendDlgItemMessageW
IsDlgButtonChecked
GetPropW
SetPropW
GetDlgItem
EnumChildWindows
GetParent
EnableWindow
ShowWindow
IsWindowEnabled
SendMessageW
SetFocus
EndDialog
WinHelpW
GetDlgCtrlID
ChildWindowFromPointEx
ScreenToClient
DestroyIcon
SetTimer
KillTimer
PostMessageW
SetCursor
LoadCursorW
LoadStringA
GetAncestor
DialogBoxParamW
UpdateWindow
SystemParametersInfoW
GetSysColorBrush
GetDlgItemTextA
BeginPaint
EndPaint
LoadBitmapW
GetClassLongW
SetClassLongW
GetWindowRect
RedrawWindow
GetActiveWindow
CheckRadioButton
SetWindowTextW
GetSysColor
FillRect
DrawIconEx
LoadIconW
wsprintfW
GetDlgItemTextW
GetClassNameW
GetClientRect
MoveWindow
GetWindowTextW
CheckDlgButton

gdi32

CreatePen
Rectangle
SelectPalette
RealizePalette
SetDIBits
CreatePalette
CreateCompatibleDC
GetObjectW
SelectObject
CreateBitmap
CreateCompatibleBitmap
StretchBlt
BitBlt
DeleteDC
ExtEscape
SetBkColor
SetTextColor
CreateSolidBrush
DeleteObject
GetTextMetricsW
GetDeviceCaps
CreateFontIndirectW

advapi32

RegOpenKeyW
RegQueryValueExW
RegCloseKey
GetUserNameW
RegSetValueExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
RegQueryValueA

shell32

ShellExecuteA
ShellExecuteW

winspool.drv

OpenPrinterW
GetPrinterDataW
SetPrinterW
ClosePrinter
GetJobW
EnumPrintersW
GetPrinterDriverW
SetPrinterDataW
GetFormW
GetPrinterW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

ole32

CoCreateInstance
CoUninitialize
CoInitialize

rpcrt4

UuidFromStringW
UuidCreate
RpcStringFreeW
UuidToStringW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3824fe70b0d57b1921901641dc4e4de

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

advapi32

shell32

winspool.drv

version

ole32

rpcrt4

Exports

Exports

Sections

.text Size: 199KB - Virtual size: 198KB

.data Size: 71KB - Virtual size: 77KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 199KB - Virtual size: 198KB

.data
Size: 71KB - Virtual size: 77KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 17KB - Virtual size: 17KB