53e15bb408b81c1732a079ac7c77e63d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

53e15bb408b81c1732a079ac7c77e63d_JaffaCakes118
Size

347KB
MD5

53e15bb408b81c1732a079ac7c77e63d
SHA1

95103fb85027d8a9cf5a96035b9a888b72a5d7bf
SHA256

01b7b89dbc8e59bb970b050a865f69fe660dcede1ce3f050d444d6b34e6374f5
SHA512

addf250aca83a159b9aca96f32462494c7db4b95063baf0cca0bfe4bead17f674fe86e6b3f64be779e5b7fd22608e8c1f1f43a7110c8700c5cf1e449e6c6f4d7
SSDEEP

6144:CakAb3ngQWsPihQHDm40M8gRvltNEqyutpFsQCsO1NnrsC0EJHmrjSc:CHq3YsPTjm4cKvlVAHr6ERm3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53e15bb408b81c1732a079ac7c77e63d_JaffaCakes118

Files

53e15bb408b81c1732a079ac7c77e63d_JaffaCakes118
.dll windows:5 windows x86 arch:x86

7ea77ee02698c56f387e357766e7f09b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\T27L10NSP32EP1\build\020p\maps\release\atRpUI.pdb

Imports

winmm

mixerClose
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetDevCapsW
waveInGetNumDevs
waveInGetDevCapsW
waveOutGetNumDevs
waveOutGetDevCapsW
mixerGetNumDevs
mixerOpen

comctl32

ImageList_Draw
_TrackMouseEvent
ImageList_GetIconSize

atwbxui12

ord2750
ord753
ord1816
ord3892
ord3972
ord4400
ord1359
ord506
ord2759
ord643
ord290
ord5965
ord5310
ord5013
ord5105
ord5356
ord4722
ord6487
ord6506
ord49
ord5960
ord5694
ord307
ord341
ord654
ord671
ord4171
ord710
ord1571
ord3
ord3940
ord4719
ord3898
ord4174
ord4384
ord4401
ord4573
ord4394
ord4398
ord4388
ord4412
ord4413
ord4417
ord4418
ord4395
ord4397
ord4396
ord4607
ord3814
ord4581
ord4539
ord4180
ord4563
ord4640
ord4392
ord4634
ord4059
ord339
ord670
ord1956
ord419
ord5971
ord763
ord692
ord385
ord526
ord3847

atkbctl

KbSetFocus
KbUninstallFocusControl
KbInstallFocusControl
KbSetDialogFocus

kernel32

GetSystemTimeAsFileTime
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
MulDiv
lstrlenA
LocalAlloc
LocalFree
CreateThread
GetCurrentDirectoryW
FreeLibrary
GetSystemInfo
GetProcAddress
GetModuleHandleW
GetVersionExW
GetCurrentProcessId
LoadLibraryW
lstrcpynW
GetModuleFileNameW
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
GetTickCount
SetLastError
MultiByteToWideChar
lstrcpyW
lstrcatW
CloseHandle
GetFileSize
CreateFileW
TerminateProcess
GetExitCodeProcess
FindClose
FindFirstFileW
CompareStringW
lstrcmpiW
GetSystemDefaultLangID
GlobalDeleteAtom
GlobalGetAtomNameW
lstrcmpW
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
GetLastError
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CreateDirectoryW
GetFileAttributesW

user32

IsDlgButtonChecked
SendDlgItemMessageW
UnregisterClassA
SetFocus
LoadIconW
BeginPaint
EndPaint
SetClassLongW
SetCursor
CallWindowProcW
DefWindowProcW
GetSysColorBrush
SetMenu
GetParent
LoadImageW
GetSystemMetrics
MessageBeep
SetForegroundWindow
IsIconic
GetActiveWindow
CheckMenuItem
GetMenuState
DestroyIcon
wsprintfW
EnableMenuItem
CheckDlgButton
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
DestroyMenu
IsMenu
OffsetRect
DestroyCursor
GetSubMenu
GetWindowTextLengthW
SetCapture
GetDlgCtrlID
CharNextW
DrawFocusRect
ReleaseCapture
GetCapture
GetFocus
GetSysColor
CreateCursor
GetClassNameW
ClientToScreen
MessageBoxW
RemovePropW
UnregisterClassW
RegisterClassW
SetPropW
DeleteMenu
GetDesktopWindow
DrawIconEx
ModifyMenuW
CopyRect
RedrawWindow
GetKeyState
IsRectEmpty
FrameRect
GetDlgItemTextW
SetTimer
CreateWindowExW
RegisterClassExW
InflateRect
FillRect
IsWindow
WindowFromPoint
PtInRect
MapWindowPoints
DestroyWindow
EnableWindow
SetRectEmpty
GetWindowRect
GetWindowTextW
DrawTextW
GetClassInfoExW
GetDlgItem
SetParent
IsWindowEnabled
KillTimer
IsWindowVisible
ShowWindow
InvalidateRect
UpdateWindow
ScreenToClient
GetClientRect
BringWindowToTop
SetWindowPos
MoveWindow
SetWindowTextW
PostMessageW
SetWindowLongW
GetDC
ReleaseDC
FindWindowW
FindWindowExW
GetWindowLongW
GetWindow
GetWindowThreadProcessId
SendMessageW
LoadMenuW
LoadCursorW
LoadBitmapW
LoadStringW
GetCursorPos
EndDialog
SetDlgItemTextW

gdi32

CreateSolidBrush
GetStockObject
CreateFontIndirectW
CreateDIBSection
CreateCompatibleDC
PatBlt
DPtoLP
CreateCompatibleBitmap
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
GetCurrentObject
SetBkMode
GetObjectW
GetTextExtentPoint32W
StretchDIBits
CreateHalftonePalette
SelectPalette
RealizePalette
CreatePen
SelectObject
MoveToEx
LineTo
DeleteObject
GetMapMode
SetMapMode
GetViewportExtEx
SetViewportExtEx
GetWindowExtEx
SetWindowExtEx
SetPixel
CreateFontW
GetDeviceCaps
GetTextMetricsW
GetDIBits
TextOutW
FillRgn
StretchBlt
CombineRgn
CreateRectRgn
Arc
CreatePatternBrush
GetBkColor
GetTextColor
GetObjectType
BitBlt
CreateBrushIndirect

advapi32

RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
IsTextUnicode
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW

shell32

SHGetSpecialFolderLocation
ShellExecuteW
ShellExecuteExW
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VarUI4FromStr
SysFreeString

msvcr90

__CxxFrameHandler3
swprintf_s
_CxxThrowException
tolower
??_V@YAXPAX@Z
memset
??_U@YAPAXI@Z
_vsnwprintf
wcsstr
wcsrchr
??3@YAXPAX@Z
_recalloc
_itow
wcschr
memcpy
_wmakepath
_wsplitpath
free
malloc
_wtoi
_purecall
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_except_handler4_common
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
memmove_s
wcsncpy_s
memcpy_s
??2@YAPAXI@Z

Exports

Exports

CleanRecorderPanel
InitOnlinePlayerConsole
InitPlayerPanel
InitRecorderConsole
InitRecorderPanel
KillOnlinePlayerConsole
KillPlayerPanel
KillRecorderConsole
KillRecorderPanel

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ea77ee02698c56f387e357766e7f09b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

comctl32

atwbxui12

atkbctl

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msvcr90

Exports

Exports

Sections

.text Size: 231KB - Virtual size: 230KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 65KB - Virtual size: 66KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 231KB - Virtual size: 230KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 65KB - Virtual size: 66KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 14KB - Virtual size: 13KB