General

Malware Config

Signatures

Files

• 0afb3ab61b555c124b6daecebcd77401_JaffaCakes118

  .exe windows:5 windows x86 arch:x86

  10aa9e88a1521455cba316d53922f1e7

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comctl32

  InitCommonControlsEx

  gdiplus

  GdiplusStartup

  GdipCloneImage

  GdipLoadImageFromStream

  GdipLoadImageFromStreamICM

  GdipLoadImageFromFile

  GdipLoadImageFromFileICM

  GdipDisposeImage

  GdipDeleteGraphics

  GdipAlloc

  GdipGraphicsClear

  GdipGetImageHeight

  GdipGetImageWidth

  GdiplusShutdown

  GdipCreateFromHDC

  GdipSetClipRectI

  GdipDrawImageRectI

  GdipFree

  kernel32

  GetTickCount

  QueryPerformanceCounter

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentThreadId

  TerminateProcess

  GetStartupInfoA

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentProcess

  lstrlenA

  InterlockedIncrement

  InterlockedDecrement

  MulDiv

  GlobalUnlock

  GetLastError

  GlobalLock

  CloseHandle

  CreateThread

  CreateEventA

  SetEvent

  MultiByteToWideChar

  user32

  LoadIconA

  DefMDIChildProcA

  GetWindowLongA

  SetWindowLongA

  LoadCursorA

  GetClientRect

  BeginPaint

  ShowWindow

  CreateWindowExA

  RegisterClassExA

  EndPaint

  LoadStringA

  MessageBoxA

  DialogBoxParamA

  SendDlgItemMessageA

  SetDlgItemTextA

  SetWindowTextA

  EndDialog

  MsgWaitForMultipleObjects

  PeekMessageA

  GetMenu

  GetSubMenu

  PostQuitMessage

  SetCursor

  EnableMenuItem

  DestroyWindow

  SendMessageA

  DefFrameProcA

  GetMessageA

  TranslateMDISysAccel

  TranslateMessage

  DispatchMessageA

  advapi32

  CryptAcquireContextA

  shell32

  ShellAboutA

  ole32

  CoTaskMemAlloc

  CLSIDFromString

  PropVariantClear

  CoInitialize

  CoUninitialize

  CoCreateInstance

  CoTaskMemRealloc

  CreateStreamOnHGlobal

  GetHGlobalFromStream

  CoTaskMemFree

  msvcr90

  _controlfp_s

  _invoke_watson

  _except_handler4_common

  _crt_debugger_hook

  ?_type_info_dtor_internal_method@type_info@@QAEXXZ

  ?terminate@@YAXXZ

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _configthreadlocale

  _initterm_e

  _initterm

  _acmdln

  exit

  _ismbblead

  _XcptFilter

  _exit

  _cexit

  __getmainargs

  _amsg_exit

  _decode_pointer

  _onexit

  _lock

  _encode_pointer

  __dllonexit

  _unlock

  memcpy

  ??2@YAPAXI@Z

  malloc

  wcslen

  ??3@YAXPAX@Z

  abs

  memcmp

  memset

  __CxxFrameHandler3

  _wcslwr

  _snprintf

  msvcp90

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

  ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

  ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z

  ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

  ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

  ?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

  ?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ

  ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z

  ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

  ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z

  ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z

  ?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ

  ??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z

  ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

  Sections

  .text

  Size: 70KB - Virtual size: 70KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 120KB - Virtual size: 119KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ