41215c929ead84dd32eb2d4fd2b7705f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

41215c929ead84dd32eb2d4fd2b7705f_JaffaCakes118
Size

317KB
MD5

41215c929ead84dd32eb2d4fd2b7705f
SHA1

babcb1c1836969f41e5f9f4b730d5b15a6cf6a65
SHA256

6865baf4f3529d484b39c0b252d094e2edf370cf3febaa609bf48f9269fe0d5b
SHA512

fb5cb2623ca54b628d99aadaba15cab99909ac5c27b782ed7491a7f53fe739f47ca15d195b067418c5f08c0dd5b887c0b3a3568a9ef9ad517c807ef04ee0e436
SSDEEP

6144:V04THrfqPzJCsH9oaduGLyURp0jj1XWjKcTjSyUcCEpjBYL87uXfjrJKjLWGEqOi:HrmztVzW8CV7riirRIGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41215c929ead84dd32eb2d4fd2b7705f_JaffaCakes118

Files

41215c929ead84dd32eb2d4fd2b7705f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4a2c8ea7860b8715b1b1f4250b5fc929

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IsWindow
CallWindowProcA
CharNextA
CreateAcceleratorTableA
CreateWindowExA
DefWindowProcA
DestroyAcceleratorTable
DestroyWindow
DialogBoxIndirectParamA
EnableWindow
EndDialog
EndPaint
FillRect
wsprintfA
UnregisterClassA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetWindowContextHelpId
SetFocus
SetCursor
SetCapture
SendMessageA
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClassExA
RedrawWindow
PtInRect
MessageBoxA
MapDialogRect
LoadStringA
LoadCursorA
BeginPaint
IsChild
InvalidateRgn
InvalidateRect
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindowLongA
GetWindow
GetSysColor
GetParent
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameA
GetClassInfoExA
GetActiveWindow

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CreateStreamOnHGlobal
OleInitialize
OleLockRunning
OleUninitialize
StringFromGUID2

gdi32

SetViewportOrgEx
SetTextColor
SetGraphicsMode
SetBkMode
SelectObject
SaveDC
RestoreDC
ModifyWorldTransform
GetStockObject
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetWindowOrgEx

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA

ddraw

DirectDrawEnumerateA
DSoundHelp

oleaut32

VariantInit
VariantClear
VarUI4FromStr
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocString
LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect

kernel32

InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
lstrlenA
GetVersionExA
GetTickCount
GetThreadLocale
lstrlenW
InterlockedIncrement
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FlushInstructionCache
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
IsDBCSLeadByte
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
SetLastError
SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcmpiA
GetProcessPriorityBoost
lstrcpynA
GetSystemTimeAsFileTime
GlobalAlloc
DeleteCriticalSection

comctl32

ord17

shell32

SheSetCurDrive
SHGetSpecialFolderLocation
SHGetInstanceExplorer
SHGetDiskFreeSpaceA
SHExtractIconsW
SHAppBarMessage
SHAddToRecentDocs
DragFinish
CommandLineToArgvW

Exports

Exports

CreateCubeTextureFromFileA
GetImageInfoFromFileInMemory
mpegInOpenTSStream

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a2c8ea7860b8715b1b1f4250b5fc929

Headers

File Characteristics

Imports

user32

ole32

gdi32

advapi32

ddraw

oleaut32

kernel32

comctl32

shell32

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.rdata Size: 184KB - Virtual size: 183KB

.data Size: 42KB - Virtual size: 43KB

.rsrc Size: 38KB - Virtual size: 38KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 49KB - Virtual size: 48KB

.rdata
Size: 184KB - Virtual size: 183KB

.data
Size: 42KB - Virtual size: 43KB

.rsrc
Size: 38KB - Virtual size: 38KB

.reloc
Size: 2KB - Virtual size: 2KB