5712e8114fcc8e4828f3ac8343271888_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5712e8114fcc8e4828f3ac8343271888_JaffaCakes118
Size

264KB
MD5

5712e8114fcc8e4828f3ac8343271888
SHA1

0cb00598113cb043d377e450b75be9d3c2c75e09
SHA256

aa3e7b3f1a0f5895354e4ad7de38e7dd10826357f208f3a35f104b576eca0048
SHA512

fb297834023c868b17a6f88bf26ec42d09bd2d7ddb049f07b4e8383428b661f2a0516e7cf98fa1c76c955831420a65f20076ddd3fb9882ecf1980aa6fe53f7b7
SSDEEP

6144:pDyU2rTUQGpie7FNNAJrd+xjWdstz1joTvUhpPv:pDyUT5piWNY+xyKtmTvUhpn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5712e8114fcc8e4828f3ac8343271888_JaffaCakes118

Files

5712e8114fcc8e4828f3ac8343271888_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d0303ec3f92dd701909f2d599896688d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SysAllocStringLen
OleTranslateColor
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayGetElement
VariantInit
VariantCopyInd
VariantCopy
VariantClear
VarUI4FromStr
SysStringLen
SysStringByteLen
SysReAllocString
SysFreeString
OleIconToCursor
SysAllocStringByteLen
SysAllocString
SafeArrayUnlock
SafeArrayUnaccessData
SafeArrayPutElement
SafeArrayLock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryValueA
RegQueryInfoKeyA
RegCloseKey
RegOpenKeyA
RegEnumKeyExA
RegDeleteValueA

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageA
PropertySheetA

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance

kernel32

TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
UnhandledExceptionFilter
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetStdHandle
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenW
TerminateProcess
GetStartupInfoA
SetLastError
SetHandleCount
SetFilePointer
SetEvent
SetEndOfFile
CloseHandle
CreateEventA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateThread
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
ExitProcess
FileTimeToSystemTime
FindFirstFileA
FindResourceA
FindResourceExA
FlushFileBuffers
FlushInstructionCache
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileSize
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetThreadLocale
GetTickCount
GetTimeFormatA
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsDBCSLeadByte
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LocalAlloc
LocalFree
LocalLock
LocalUnlock
LockResource
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ResetEvent
ResumeThread
RtlUnwind

Exports

Exports

BindTexture
D3D9Begin
D3D9RegisterVertexBuffer
D3D9ResourceGetMappedPitch
D3D9ResourceGetMappedSize
D3D9ResourceGetSurfaceDimensions
D3D9ResourceSetMapFlags
EnumDeviceReset
EnumFlashSettingNext
EnumImageItemNext
EventQuery
EventSynchronize
GLSetBufferObjectMapFlags
GetChannelDesc
GetDevSplineArrayEx
GetDllsVersion
GetThinImageSize
GetVMSInfo
Memcpy2DFromArray
ThreadExit
WaitForMedia

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0303ec3f92dd701909f2d599896688d

Headers

File Characteristics

Imports

oleaut32

advapi32

comctl32

ole32

kernel32

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 168KB

.data Size: 84KB - Virtual size: 112KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 168KB - Virtual size: 168KB

.data
Size: 84KB - Virtual size: 112KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB