JaffaCakes118_478a21c7ccae13aba61132456e494140

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_478a21c7ccae13aba61132456e494140
Size

288KB
MD5

478a21c7ccae13aba61132456e494140
SHA1

b8830d7ca9e12077227056126889483b25ce44ca
SHA256

4bd58658c57e8be31e802bb12df4286d3cafdac5d814ab4a103303874e8a79b6
SHA512

d1be3c915f8b7368dcd56a3789d899f91450de6383d2ae9b036a154cd718917ea9f73e694c917b96020c9559b019810664a5976a7f8049925c569a0d5d037722
SSDEEP

6144:9F4NPDaRtsrSwLF8OAVO4S/g1di39clm8:XIbaRt6SyHAV7diel

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_478a21c7ccae13aba61132456e494140

Files

JaffaCakes118_478a21c7ccae13aba61132456e494140
.dll windows:4 windows x86 arch:x86

2f0bd3319b6eb7da7b7fcea255a9a2fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetACP
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapAlloc
GetProcessHeap
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
HeapReAlloc
HeapSize
TerminateProcess
ExitProcess
RaiseException
GetCommandLineA
RtlUnwind
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcessVersion
FreeLibrary
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
WritePrivateProfileStringA
GlobalFlags
GetFileTime
GetFileAttributesA
GetVersion
lstrcatA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
HeapFree
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
WideCharToMultiByte
InterlockedIncrement
GetModuleHandleA
GetModuleFileNameA
lstrcmpiA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
lstrcpynA
GetLastError
SetLastError
InterlockedDecrement
lstrlenA
lstrcmpA
LocalAlloc
LocalFree
GlobalSize
WriteFile
GetFileSize
ReadFile
GlobalReAlloc
SetFilePointer
CreateFileA
CloseHandle
GlobalHandle

user32

GetCapture
GetTopWindow
CopyRect
AdjustWindowRectEx
MapWindowPoints
LoadIconA
GetSysColorBrush
DestroyMenu
GetMenu
GetSubMenu
GetMenuItemID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetMenuItemCount
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
WinHelpA
GetDlgItem
GetWindowTextA
SetWindowTextA
GetWindow
GetDlgCtrlID
PtInRect
GetClassNameA
LoadStringA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
SendMessageA
PostMessageA
PostQuitMessage
GrayStringA
DrawTextA
TabbedTextOutA
GetSystemMetrics
CharUpperA
wsprintfA
UnhookWindowsHookEx
GetActiveWindow
MessageBoxA
GetClientRect
ClientToScreen
GetClassInfoA
RegisterClassA
GetWindowRect
GetSysColor
LoadCursorA
SetCursor
GetDC
ReleaseDC
UnregisterClassA
SetMenuItemBitmaps

gdi32

CreatePalette
GetObjectA
BitBlt
CreateCompatibleDC
GetPaletteEntries
GetDeviceCaps
GetStockObject
DeleteObject
GdiFlush
DeleteDC
SetDIBColorTable
SelectObject
CreateDIBSection
CreateHalftonePalette
SetBkColor
SetMapMode
CreateBitmap
SaveDC
RestoreDC
SetTextColor
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetDIBits

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

comctl32

ord17

Exports

Exports

BmpToBmp
BmpToJpg
JpgToBmp

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2f0bd3319b6eb7da7b7fcea255a9a2fc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 158KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 16KB - Virtual size: 26KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 16KB - Virtual size: 13KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 160KB - Virtual size: 158KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 16KB - Virtual size: 26KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 16KB - Virtual size: 13KB

.rmnet
Size: 60KB - Virtual size: 60KB