f09690e7718762a6bd74ad91238aa98b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f09690e7718762a6bd74ad91238aa98b_JaffaCakes118
Size

128KB
MD5

f09690e7718762a6bd74ad91238aa98b
SHA1

d14a94e43e90bbbbb32b7433eb157d45d980f059
SHA256

ab94e236808c329d58652514ad65dd38b1a38826284920865230ee443a848023
SHA512

67345d8022943bee27e60eb7f9b93d2fee829886031a22826414b94eb96cac15940de5b812f72ecc19e2ca1f87fe057d058cab6944b820ec4d705d6edf2801bf
SSDEEP

3072:G4A2rAY0S54OwqqWAl4a0KOKQ/Gp5APKDYVB/Z0mOA1S:G4A2rAoyOYWYUUtcnZlS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f09690e7718762a6bd74ad91238aa98b_JaffaCakes118

Files

f09690e7718762a6bd74ad91238aa98b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9d86624a79c949462e51bbb6f0574667

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetLastError
LocalAlloc
GetCurrentProcess
GetWindowsDirectoryA
LCMapStringA
TerminateProcess
GetCurrentThreadId
SetEnvironmentVariableA
CompareStringW
HeapReAlloc
SetFilePointer
SetStdHandle
CompareStringA
GetTimeZoneInformation
FlushFileBuffers
GetLocaleInfoW
GetProcAddress
GetStringTypeW
LoadLibraryA
UnhandledExceptionFilter
GetVersionExA
GetStringTypeA
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidLocale
VirtualAlloc
IsValidCodePage
VirtualFree
HeapCreate
WriteFile
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
LocalFree
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
Sleep
GetEnvironmentStrings
HeapDestroy
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW

advapi32

RegSetValueExA
RegRestoreKeyA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
RegCreateKeyExA
AdjustTokenPrivileges

setupapi

SetupDiCreateDeviceInfoA
SetupDiClassGuidsFromNameA
SetupDiBuildDriverInfoList
SetupDiEnumDeviceInfo
SetupDiSetDeviceRegistryPropertyA
CM_Get_First_Log_Conf
SetupDiEnumDriverInfoA
SetupDiSetSelectedDriverA
CM_Get_Res_Des_Data_Size
CM_Get_Next_Res_Des
CM_Get_Next_Log_Conf
CM_Add_Empty_Log_Conf
CM_Get_Res_Des_Data
CM_Free_Res_Des_Handle
SetupGetIntField
CM_Add_Res_Des
CM_Free_Log_Conf_Handle
SetupFindFirstLineA
SetupFindNextLine
SetupGetStringFieldA
SetupDiOpenDevRegKey
SetupOpenInfFileA
SetupCloseInfFile
SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiSetDeviceInstallParamsA

Exports

Exports

DigiMultiPortCoInstaller

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d86624a79c949462e51bbb6f0574667

Headers

File Characteristics

Imports

kernel32

advapi32

setupapi

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 15KB - Virtual size: 20KB

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 15KB - Virtual size: 20KB

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 4KB - Virtual size: 3KB