41f28db5d7bd9702e75391274180f860_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

41f28db5d7bd9702e75391274180f860_JaffaCakes118
Size

849KB
MD5

41f28db5d7bd9702e75391274180f860
SHA1

a1601d579486d4b6f3572d1a2220325dfa188a93
SHA256

1513f73c30a5012a0e81165bb89cfa43dea23ca4500c5958668d387f6de776f6
SHA512

2e1543b7f113da236504a9e39bfab6efe44e44d686af4a46f4e5c50cb52b7547f9ddba274f0be516260e77840b679c261ca6034d730f691b0f07fe9688102bbf
SSDEEP

24576:GkhOYtR5VP8eMuExtAjwQYhQ9H5zF7M4Rhd:bOGVPrMv4YhQXzd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41f28db5d7bd9702e75391274180f860_JaffaCakes118

Files

41f28db5d7bd9702e75391274180f860_JaffaCakes118
.dll windows:5 windows x86 arch:x86

36b637e97f6a25fc0f37dd0561bab5c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\xrcyxq4x\wkho6bb\njmfyqy\bby74o3k.pdb

Imports

kernel32

SetEvent
LoadLibraryA
VirtualProtect
GetModuleHandleA
InterlockedExchangeAdd
ExitThread
GetConsoleCP
ExitProcess
EnterCriticalSection
HeapAlloc
FindResourceW
GetCurrentProcessId
SizeofResource
CreateFileW
FormatMessageW
OutputDebugStringW
LockResource
GlobalUnlock
GetModuleHandleW
SetEndOfFile
GetLogicalDriveStringsW
FreeLibrary
GetCurrentProcess
SetUnhandledExceptionFilter
RaiseException
GetTickCount
InterlockedDecrement
QueryPerformanceCounter
GetPrivateProfileIntW
InterlockedIncrement
Process32FirstW
GetModuleFileNameW
DeleteCriticalSection
LocalFree
Process32NextW
DuplicateHandle
GetProcessHeap
GetFullPathNameW
GetExitCodeProcess
Thread32First
GlobalAlloc
WriteFile
InterlockedCompareExchange
SetCurrentDirectoryW
QueryDosDeviceW
InitializeCriticalSectionAndSpinCount
GetFileAttributesW
SetFilePointer
GetVersion
DeviceIoControl
OpenEventW
GetVersionExW
IsDebuggerPresent
CreateEventW
MulDiv
HeapSetInformation
IsProcessorFeaturePresent
CreateToolhelp32Snapshot
Thread32Next
LoadLibraryW
TerminateProcess
LoadLibraryExW
GetProcAddress
ReadFile
WaitForMultipleObjects
Sleep
SetErrorMode
HeapFree
VerSetConditionMask
MultiByteToWideChar
GetFileAttributesExW
HeapReAlloc
HeapSize
ResetEvent
GetCurrentThreadId
LoadResource
GlobalLock
GetStartupInfoW
WaitForSingleObject
GetLastError
LeaveCriticalSection
CreateProcessW
HeapDestroy
VerifyVersionInfoW
FindResourceExW
GetFileSize
OpenProcess
SetLastError
UnhandledExceptionFilter
CloseHandle
GetSystemTimeAsFileTime
InterlockedExchange
GetSystemDirectoryW
LocalAlloc
GlobalFree
WideCharToMultiByte

user32

InsertMenuItemW
MessageBeep
GetMessagePos
ReleaseCapture
GetSystemMenu
DdeUninitialize
PostMessageW
ChildWindowFromPoint
DefWindowProcW
TranslateAcceleratorW
SetCursorPos
IsClipboardFormatAvailable
GetMessageW
ScreenToClient
GetWindowDC
ValidateRect
CreateDialogIndirectParamW
LoadIconW
HideCaret
DdeFreeDataHandle
GetDoubleClickTime
FillRect
keybd_event
PostThreadMessageW
SystemParametersInfoW
DrawTextW
EnumThreadWindows
InflateRect
BringWindowToTop
GetAsyncKeyState
EnumWindows
ClientToScreen
DdeDisconnect
CopyRect
SendMessageW
CreateWindowExW
GetSystemMetrics
SetParent
LoadImageW
GetWindowThreadProcessId
CallNextHookEx
GetClientRect
KillTimer
SetWindowLongW
ReleaseDC
FindWindowExW
GetUpdateRgn
DdeNameService
GetIconInfo
GetKeyboardState
SetFocus
ToUnicode
DrawFrameControl
DrawStateW
GetClipboardFormatNameW
CreateDialogParamW
IsDialogMessageW
EndPaint
GetActiveWindow
GetKeyState
CheckMenuRadioItem
GetDesktopWindow
SetCursor
IsWindow
InsertMenuW
DrawFocusRect
SetTimer
GetScrollInfo
IsZoomed
DestroyWindow
SetClipboardData
GetDC
CreateMenu
GetClipboardData
CreateAcceleratorTableW
GetClassNameW
SetScrollInfo
IsWindowEnabled
DestroyAcceleratorTable
BeginPaint
DdeFreeStringHandle
GetMenuState
GetWindowTextLengthW
DdeCreateStringHandleW
DrawEdge
LoadCursorFromFileW
EndDeferWindowPos
OpenClipboard
AppendMenuW
GetParent
OffsetRect
DestroyMenu
RegisterWindowMessageW
UnregisterClassW
DdeConnect
CheckMenuItem
MapWindowPoints
ExitWindowsEx
DrawMenuBar
SetWindowRgn
GetMessageTime
GetSysColor
SetMenu
WindowFromPoint
GetClassInfoW
DdeQueryStringW
GetMenuItemInfoW
DdeGetLastError
ModifyMenuW
GetMenu
AdjustWindowRectEx
GetCapture
GetForegroundWindow
DrawIcon
WaitForInputIdle
ChangeDisplaySettingsW
EnumDisplaySettingsW
BeginDeferWindowPos
MsgWaitForMultipleObjects
SetWindowsHookExW
GetMenuItemCount
LoadBitmapW
GetWindowLongW
ShowCaret
EnableWindow
TranslateMessage
CreateIconIndirect
SetMenuItemInfoW
GetFocus
DrawIconEx
CreatePopupMenu
LoadAcceleratorsW
IsWindowVisible
SetWindowTextW
EndDialog
DdeInitializeW
InvalidateRect
UpdateWindow
VkKeyScanW
GetUpdateRect
EnumClipboardFormats
CallWindowProcW
GetCursorPos
ShowCursor
EnableMenuItem
FlashWindow
GetSubMenu
DdeCreateDataHandle
PostQuitMessage
ScrollWindow
DeferWindowPos
DdeGetData
DdePostAdvise
UnhookWindowsHookEx
IsIconic
PtInRect
RegisterClipboardFormatW
MessageBoxW
DestroyCursor
SetCapture
CloseClipboard
SetForegroundWindow
UnionRect
EmptyClipboard
ShowWindow
DispatchMessageW
PeekMessageW
GetWindowTextW
TrackPopupMenu
RemoveMenu
MoveWindow
SetWindowPos
RedrawWindow
GetWindowRect
DestroyIcon
DdeClientTransaction
GetWindow

gdi32

SetStretchBltMode
CopyEnhMetaFileW
CreatePatternBrush
DeleteDC
CreateBitmapIndirect
CreateCompatibleBitmap
SetROP2
GetWinMetaFileBits
SetBrushOrgEx
EqualRgn
DeleteEnhMetaFile
CreateCompatibleDC
CombineRgn
SetWinMetaFileBits
SetMapMode
GetNearestPaletteIndex
ExtCreatePen
SetViewportOrgEx
GetObjectW
SetPolyFillMode
TextOutW
ExtCreateRegion
CreateRectRgn
CreatePolygonRgn
Ellipse
LineTo
CreatePen
GetSystemPaletteEntries
GetBkColor
CreateDIBSection
SelectClipRgn
SetMetaFileBitsEx
ExtFloodFill
SaveDC
GetEnhMetaFileHeader
CloseEnhMetaFile
Pie
GetTextMetricsW
CreateRectRgnIndirect
CreateFontIndirectW
OffsetRgn
GetStockObject
GetDIBits
GetEnhMetaFileW
RealizePalette
CreateSolidBrush
GetMetaFileBitsEx
SetWindowOrgEx
PlayEnhMetaFile
CreateICW
Rectangle
StretchBlt
GetClipBox
RoundRect
MoveToEx
MaskBlt
GetTextExtentPoint32W
GetPixel
SetBkMode
DeleteObject
RectInRegion
Polygon
SetPixel
GetTextColor
CreateDIBitmap
GdiFlush
GetCharABCWidthsW
CreatePalette
GetDIBColorTable
CreateEnhMetaFileW
GetTextExtentExPointW
SetTextColor
ExcludeClipRect
StretchDIBits
SetTextAlign
Polyline
GetDeviceCaps
SetBkColor
GetRgnBox
RestoreDC
CreateHatchBrush
PtInRegion
GetPaletteEntries
ExtSelectClipRgn
SetViewportExtEx
PatBlt
EnumFontFamiliesExW
CreateBitmap
SelectObject
BitBlt
SelectPalette
Arc
SetWindowExtEx
GetRegionData

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW
ChooseFontW
ChooseColorW

advapi32

RegCreateKeyW
RegOpenKeyExA
OpenProcessToken
RegQueryValueExA
RegSetValueExW
RegQueryInfoKeyW
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
RegDeleteKeyW
RegCloseKey
RegEnumKeyW
LookupPrivilegeValueW
RegQueryValueExW
AdjustTokenPrivileges
GetUserNameW

shell32

SHGetFolderPathW
ExtractIconExW
Shell_NotifyIconW
DragQueryPoint
SHGetFileInfoW
ExtractIconW
SHFileOperationW
DragFinish
SHBrowseForFolderW
DragAcceptFiles
ShellExecuteExW
DragQueryFileW
SHGetIconOverlayIndexW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation

oleaut32

SysAllocString
SysStringLen

msvcrt

memset

Sections

.text
Size: 498KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36b637e97f6a25fc0f37dd0561bab5c6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

msvcrt

Sections

.text Size: 498KB - Virtual size: 497KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 259KB - Virtual size: 290KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 498KB - Virtual size: 497KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 259KB - Virtual size: 290KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 3KB