103b42a5d3d35489cef55506f685d07f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

103b42a5d3d35489cef55506f685d07f_JaffaCakes118
Size

103KB
MD5

103b42a5d3d35489cef55506f685d07f
SHA1

e33b62997406d2db45f501686669e0ba18a82744
SHA256

e921a2dc7664d60e41417ece755f33e995ca7cca59cb884e9763d9b838fc832e
SHA512

0cbc8f7fcec16bbca5f735e23c63bde04e8852666c53f420ca50813e9a0d899bf77576f9af2d48adae3fa9ad1e10024af28e63dc5fe2617e6e94d4ff3ebe7171
SSDEEP

3072:I12nxwABjU0exJSNk2dVavhmmAoAkZApg5f8WDVZNI:I1fyIVJ2mb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
103b42a5d3d35489cef55506f685d07f_JaffaCakes118

Files

103b42a5d3d35489cef55506f685d07f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

6033886f29c1a99ba4607282a5ef8d8e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSACleanup
WSAWaitForMultipleEvents
closesocket
WSACreateEvent
socket
WSAIoctl
WSASocketA
WSAStartup
WSACloseEvent
WSASetEvent
recvfrom
ntohl
WSAGetLastError
WSAEnumNetworkEvents
htons
WSAEventSelect
ntohs
setsockopt
sendto
bind
htonl

iphlpapi

GetIpAddrTable

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize
CoInitializeSecurity
CLSIDFromProgID

comctl32

InitCommonControlsEx

kernel32

EnterCriticalSection
GetConsoleMode
GetConsoleCP
WriteFile
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
HeapAlloc
HeapReAlloc
SetEvent
GetModuleHandleW
GetTickCount
GlobalAlloc
GetSystemDirectoryW
Sleep
FormatMessageW
CompareStringW
lstrcmpW
MultiByteToWideChar
lstrlenW
GetLastError
SetLastError
GlobalFree
lstrcmpiW
lstrcatW
GetCurrentThreadId
lstrcpyW
LeaveCriticalSection
GetVersionExW
GetProcAddress
DisableThreadLibraryCalls
WideCharToMultiByte
CreateMutexA
CloseHandle
WaitForSingleObject
CreateEventA
ResetEvent
ReleaseMutex
LoadLibraryA
WaitForMultipleObjects
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CreateThread
HeapFree
ExitThread
GetCommandLineA
DecodePointer
GetStringTypeW
FreeLibrary
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameW
RtlUnwind
IsProcessorFeaturePresent
LCMapStringW
SetStdHandle
WriteConsoleW
HeapSize
CreateFileW
FlushFileBuffers
LoadLibraryW

user32

UnregisterClassW
FillRect
GetWindowRect
ScreenToClient
GetSystemMenu
SetCursor
DestroyWindow
ClientToScreen
EndPaint
GetNextDlgTabItem
PostMessageA
DialogBoxParamW
GetParent
LoadCursorW
MessageBeep
IsWindowEnabled
PostMessageW
DrawTextExW
SetFocus
BeginPaint
wsprintfW
GetDC
GetForegroundWindow
RegisterClassExW
IntersectRect
InvalidateRect
GetWindowLongW
GetWindowTextW
SystemParametersInfoW
GetClassNameW
ReleaseDC
EnableMenuItem
GetDlgItem
SetWindowLongW
EndDialog
SendDlgItemMessageW
DrawTextW
GetClientRect
GetFocus
GetDesktopWindow
GetSysColor
SetWindowPos
LoadStringW
LoadBitmapW
IsWindow
CreateWindowExW
MessageBoxW
GetSystemMetrics
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
MapWindowPoints
EnableWindow
SetWindowTextW
DefWindowProcW
GetWindow
EnumChildWindows

gdi32

SetBkColor
SetBkMode
DeleteDC
SetTextColor
DeleteObject
SelectObject
CreateCompatibleDC
GetObjectW
CreateSolidBrush
GetStockObject
StretchBlt

advapi32

RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA

winspool.drv

OpenPrinterW
EnumPortsW
XcvDataW
AddPortW
DeletePortW
ClosePrinter

imm32

ImmAssociateContext

oleaut32

VariantClear
VariantInit

Exports

Exports

InitializePrintMonitorUI

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6033886f29c1a99ba4607282a5ef8d8e

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

iphlpapi

ole32

comctl32

kernel32

user32

gdi32

advapi32

winspool.drv

imm32

oleaut32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 3KB - Virtual size: 10KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 3KB - Virtual size: 10KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB