ff9ba63965fb7c08e975d6a667cdd238_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ff9ba63965fb7c08e975d6a667cdd238_JaffaCakes118
Size

48KB
MD5

ff9ba63965fb7c08e975d6a667cdd238
SHA1

63772a6a1222acb009ee374c2c714fa140e2d13e
SHA256

e92524cd84e24ecb5f824dbf7e98f1e23cf535fa506cb16491d82f8b60c98733
SHA512

50d9292f0e455d8d46d5dc7719fcb1c7a66d5052618b833d980015ac453c389c07faf76af3c68dba5acd91333c273f68bfeaab95a20d432b083d2eb28e330b1c
SSDEEP

768:Rlwh5VrLSIpRnXMgulxqKccisUl6UujRYUCjbPMe/C6aggpZImwITc1UJ9qalbrR:USIp1XMDlxnccis/pYUQMeeg6JLg6J9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff9ba63965fb7c08e975d6a667cdd238_JaffaCakes118

Files

ff9ba63965fb7c08e975d6a667cdd238_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5b7e956c85b256514553ff12ceb0c10d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

shlwapi

PathIsUNCW
PathIsNetworkPathW
PathIsRelativeW
PathFindFileNameA
StrCmpNW
PathAppendW

ntdll

NtGetCurrentProcessorNumber
NtOpenMutant
NtOpenMutant

gdi32

RestoreDC
CreateFontA
GetTextMetricsA
BitBlt

kernel32

QueryPerformanceFrequency
CloseHandle
GetLogicalDrives
CreateFileW
GetProcAddress
CreateSemaphoreA
VirtualAlloc
InterlockedIncrement
LocalFree
CreateEventA
lstrlenW
CreateProcessW
CompareStringA
LocalAlloc
TlsAlloc
ExitProcess
InitializeCriticalSectionAndSpinCount

user32

ScreenToClient
GetWindowTextW
SetMenuItemInfoW
GetParent
GetDlgItemTextA
SetMenuItemInfoA
LoadAcceleratorsA
GetDlgItemInt
CharLowerW
SetWindowLongA
ShowWindowAsync
CharPrevW
SendMessageCallbackA
LoadMenuA
CheckMenuItem
GetPropW
DestroyMenu
RegisterClipboardFormatA
SystemParametersInfoW
SetClipboardData
ChildWindowFromPointEx
LoadMenuW
EqualRect
CharNextW

Exports

Exports

CreateProcessNotify
GetUdpTable
bcdbgman
DeleteProxyArpEntry
GetAdapterIndex
SetIpTTL
Icmp6CreateFile
IpRenewAddress
GetInterfaceInfo
InternalCreateIpNetEntry
SetIfEntry
GetIpForwardTable
GetAdapterOrderMap
DeleteIPAddress
NTTimeToNTPTime
AllocateAndGetIpAddrTableFromStack
GetRTTAndHopCount
GetTcpTable
GetOwnerModuleFromTcp6Entry
InternalSetIpNetEntry
DeleteIpForwardEntry
InternalDeleteIpForwardEntry
GetExtendedTcpTable
CreateIpForwardEntry
GetIpNetTable
NotifyRouteChange
GetNumberOfInterfaces
AddIPAddress
GetIpStatistics
IcmpSendEcho
InternalCreateIpForwardEntry
NTPTimeToNTFileTime
CancelIPChangeNotify
InternalSetIfEntry
IcmpParseReplies
InternalGetIfTable
InternalSetTcpEntry
SetIpForwardEntry
InternalGetTcpTable
UnenableRouter
DisableMediaSense
GetOwnerModuleFromUdpEntry
GetUdpStatistics
GetOwnerModuleFromUdp6Entry
InternalGetIpForwardTable
GetFriendlyIfIndex
GetAdaptersInfo
GetUdpStatisticsEx
GetIcmpStatisticsEx
IpReleaseAddress
GetBestRoute
GetNetworkParams
GetUniDirectionalAdapterInfo
CreateIpNetEntry
InternalGetUdpTable
IcmpCloseHandle
SetAdapterIpAddress
EnableRouter
NotifyAddrChange
DeleteIpNetEntry
GetBestInterfaceEx
do_echo_req
GetOwnerModuleFromTcpEntry
NhGetInterfaceNameFromDeviceGuid
GetAdaptersAddresses
Icmp6SendEcho2
register_icmp
SetIpStatistics
GetPerAdapterInfo
CreateProxyArpEntry
do_echo_rep
InternalSetIpForwardEntry
SetIpNetEntry
GetBestInterface
InternalDeleteIpNetEntry
GetIpStatisticsEx
InternalSetIpStats
RestoreMediaSense
FlushIpNetTable
GetIpAddrTable
GetTcpStatistics

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b7e956c85b256514553ff12ceb0c10d

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

ntdll

gdi32

kernel32

user32

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 35KB

.data Size: 11KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 35KB

.data
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB