f18acb5d5c2a974738220145e061711f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f18acb5d5c2a974738220145e061711f_JaffaCakes118
Size

240KB
MD5

f18acb5d5c2a974738220145e061711f
SHA1

2a80b33ec7b42a51af83e5ab2da9c578626781b3
SHA256

c73f64e73cbf22df95309df1412332de78e22ed634b95239f8bd2df37cd00887
SHA512

1c6d5a4b9923ef711f1bef8734425eb145437357bff01d0534d56197e59994afc283fe38bcff8a839dbcd37dabbf0b5cf900afc1eb448bfa2aafe97b6cc30129
SSDEEP

6144:yuzEdf6a4ETjnIP/ia0029TB4zo7GY5T443OfL9mu0Wkzv:yFhJlB029Tzf3+j9mj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f18acb5d5c2a974738220145e061711f_JaffaCakes118

Files

f18acb5d5c2a974738220145e061711f_JaffaCakes118
.dll windows:6 windows x64 arch:x64

f84432dd3b2e24aac7a85eee22b190f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
GetModuleHandleW
GetCurrentThread
VirtualFree
CreateRemoteThread
OpenProcess
VirtualFreeEx
GetConsoleWindow
TerminateProcess
MultiByteToWideChar
GetLastError
VirtualAlloc
VirtualAllocEx
DisableThreadLibraryCalls
LoadLibraryA
GetCurrentProcess
ProcessIdToSessionId
GetModuleFileNameA
Process32NextW
lstrcmpiW
GetModuleHandleA
CreateMutexA
CreateToolhelp32Snapshot
CloseHandle
GetCurrentProcessId
WriteProcessMemory
GetThreadContext
SetThreadContext
LoadLibraryW
CreateProcessA
ResumeThread
SetUnhandledExceptionFilter
FreeLibrary
SetErrorMode
Process32FirstW
GetProcAddress
CreateFileW
WriteConsoleW
FlushFileBuffers
HeapFree
HeapAlloc
EncodePointer
DecodePointer
ReadFile
WideCharToMultiByte
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetProcessHeap
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
Sleep
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetConsoleMode
ReadConsoleW
SetFilePointer
SetFilePointerEx
GetFileType
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStringTypeW
LCMapStringEx
LoadLibraryExW
OutputDebugStringW
HeapReAlloc
GetConsoleCP
SetStdHandle
SetEndOfFile

advapi32

LookupPrivilegeValueW
OpenThreadToken
OpenProcessToken
AdjustTokenPrivileges

ole32

StringFromCLSID
CoCreateGuid

Exports

Exports

ServiceCrtMain

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f84432dd3b2e24aac7a85eee22b190f7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ole32

Exports

Exports

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 151KB - Virtual size: 151KB

.data Size: 5KB - Virtual size: 15KB

.pdata Size: 4KB - Virtual size: 3KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 151KB - Virtual size: 151KB

.data
Size: 5KB - Virtual size: 15KB

.pdata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 3KB