437b91fef7ef29347d4c3341c60094cb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

437b91fef7ef29347d4c3341c60094cb_JaffaCakes118
Size

290KB
MD5

437b91fef7ef29347d4c3341c60094cb
SHA1

d14381c18f60b9ab15509a4e94a33395cd452c7a
SHA256

68837e0a06fd1276d34ce9d20c37e1f87280ca10bc67e984650c3966e84a216f
SHA512

a7a08e468549867a733594ad80c6d9cbb8262fdd009cc883743e2e5665d393eb6ae754c22218c4e6d2fc376a242b2cf5c6780050bb403cdb8e6c156ae79c9ac3
SSDEEP

6144:fNJcRNueDRx6uV/puC9XFkzwWs4Drd4oz+9JrbVsFfvOFS:fbssM6uBpuCFFkzDx4oz+9D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
437b91fef7ef29347d4c3341c60094cb_JaffaCakes118

Files

437b91fef7ef29347d4c3341c60094cb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9622ae1831b6d102a718bd5e70269ba2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ord17

shlwapi

StrRChrW
PathRemoveFileSpecW
PathIsRootW
PathCombineW
PathCanonicalizeW
PathFileExistsW
PathFindExtensionW
PathIsURLW

nscrt

__CppXcptFilter
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
_except_handler3
_CIpow
toupper
_i64tow
log
sqrt
realloc
_wtof
fabs
pow
wcschr
wcstoul
wcscmp
strlen
_wcstoui64
_vsnwprintf
_wcsnicmp
log10
swscanf
_itow
_vsnprintf
calloc
_wtoi
malloc
??1type_info@@UAE@XZ
_strnicmp
_stricmp
wcsstr
_wcsicmp
_wcsdup
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_purecall
memset
memcmp
memcpy
??_V@YAXPAX@Z
??_U@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
memmove
wcslen
_CxxThrowException
free

kernel32

GetTimeFormatW
DeleteFileW
LoadResource
FindResourceExW
GetTempPathW
SetFilePointer
WriteFile
RaiseException
DisableThreadLibraryCalls
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetLocalTime
GlobalMemoryStatus
GetDiskFreeSpaceA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
DeviceIoControl
GetVersionExA
InterlockedCompareExchange
HeapSize
HeapFree
GetProcessHeap
HeapAlloc
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleHandleW
GetVersion
DeleteCriticalSection
SetEvent
WaitForSingleObject
ResetEvent
WritePrivateProfileStringW
GetPrivateProfileIntW
CreateEventW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
InitializeCriticalSection
lstrlenA
lstrcmpiW
GetPrivateProfileStringW
lstrcpynW
QueueUserAPC
WaitForSingleObjectEx
SetThreadPriority
CreateThread
CloseHandle
Sleep
lstrlenW
CompareStringW
MulDiv
WaitForMultipleObjects
lstrcmpW
InterlockedIncrement
InterlockedDecrement
LocalFree
GetTickCount
WritePrivateProfileStructW
GetPrivateProfileStructW
GlobalUnlock
GlobalLock
GlobalAlloc
LocalAlloc
GetCurrentThread
OutputDebugStringA
ReadFile
CreateFileW
GetLastError
LoadLibraryA
GetModuleHandleA
InterlockedExchange
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
CreateEventA

user32

CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
CharPrevW
DefWindowProcW
GetWindowRect
ShowWindow
CopyRect
MessageBoxIndirectA
PeekMessageW
DispatchMessageW
GetSystemMetrics
SystemParametersInfoW
EnumDisplaySettingsW
BeginPaint
ScreenToClient
FillRect
SetWindowPos
SetFocus
GetDlgItemInt
EnableWindow
SendDlgItemMessageW
KillTimer
SetTimer
DestroyWindow
GetClassInfoW
RegisterClassW
CreateWindowExW
MessageBoxW
SendMessageA
GetWindowLongW
EndPaint
IsWindow
GetClientRect
InvalidateRect
ClientToScreen
SetWindowTextW
EndDialog
CheckDlgButton
SetDlgItemInt
IsDlgButtonChecked
GetDlgItemTextW
GetDlgItem
PostMessageW
wsprintfA
wsprintfW
MessageBoxIndirectW
SendMessageW
LoadStringW
SendDlgItemMessageA
PostMessageA
SendNotifyMessageA
MessageBeep
TranslateMessage
IsDialogMessageA
DrawTextW
InflateRect
SetRect
GetSysColorBrush
UpdateWindow
BringWindowToTop
SetForegroundWindow
LoadBitmapW
RegisterWindowMessageA
SetPropW
SetWindowLongA
DialogBoxIndirectParamW
PostQuitMessage
GetMessageW
CreateDialogIndirectParamA
GetParent
CharNextW
SetWindowLongW
CallWindowProcW
SetDlgItemTextW

gdi32

SetBkMode
SetTextColor
CreateDIBSection
DeleteDC
CreateSolidBrush
SelectObject
Rectangle
CreatePen
CreateCompatibleDC
GetStockObject
CreateBrushIndirect
SetPixel
GetPixel
BitBlt
StretchBlt
DeleteObject
RectVisible

advapi32

RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

ole32

CoTaskMemAlloc
CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemFree

oleaut32

SafeArrayAccessData
SysFreeString
SysAllocString
VariantInit
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayDestroy

Exports

Exports

GetDS
GetWave
burn_doBurn
winampAddUnifiedFileInfoPane
winampClearExtendedFileInfoW
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 226KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9622ae1831b6d102a718bd5e70269ba2

Headers

File Characteristics

Imports

comctl32

shlwapi

nscrt

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 222KB - Virtual size: 221KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 8KB - Virtual size: 30KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 18KB - Virtual size: 18KB

.text Size: 226KB - Virtual size: 228KB

.text
Size: 222KB - Virtual size: 221KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 8KB - Virtual size: 30KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 18KB - Virtual size: 18KB

.text
Size: 226KB - Virtual size: 228KB