2945ebe3fddde4fb7d4736b6f13159b5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2945ebe3fddde4fb7d4736b6f13159b5_JaffaCakes118
Size

501KB
MD5

2945ebe3fddde4fb7d4736b6f13159b5
SHA1

0aae10836d6863cd360db735098bce11de7909e1
SHA256

0f22e5af9e1146e40171960269c85b5b1d9b16c835aa36be547bb474e1a86e2f
SHA512

02592f71b68912f1fac6bce386b59509276763f10066a9eb65d1acdd8b7f46be274976540179ceac73151d544f9cf16a5ce93333fb87ed196098e6f3c5e2db32
SSDEEP

12288:NUgXWjuyTG6bs21Hb7sWrQfnGoDdqUuw/uBETaB6UbAbT8:BWjuyTG6Y4H0EQfnGoDdqUuw/uKTk6Um

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2945ebe3fddde4fb7d4736b6f13159b5_JaffaCakes118

Files

2945ebe3fddde4fb7d4736b6f13159b5_JaffaCakes118
.dll windows:6 windows x86 arch:x86

8c71f0db62252851163c848dcd4fa7c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
UnmapViewOfFile
CreateFileMappingA
LocalFree
MapViewOfFile
WaitForMultipleObjects
SetFilePointer
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFileAttributesA
GetEnvironmentVariableA
CreateFileA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetOEMCP
GetCPInfo
GetACP
OpenProcess
RaiseException
DecodePointer
SetEndOfFile
HeapSize
WriteConsoleW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
LocalAlloc
GetCommandLineA
IsValidCodePage
FindFirstFileExA
DeleteFileW
ReadConsoleW
SetFilePointerEx
FindNextFileA
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
HeapReAlloc
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetTimeZoneInformation
GetModuleHandleExW
ExitProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
CreateFileW
RtlUnwind
LoadLibraryExW
GetProcessTimes
QueryPerformanceCounter
GlobalMemoryStatus
GetSystemTime
GetThreadTimes
GetCurrentProcessId
GetWindowsDirectoryA
GetCurrentThread
GetEnvironmentStringsW
FindClose
LoadLibraryA
GetSystemDirectoryA
MulDiv
FreeLibrary
GetProcAddress
GetModuleFileNameA
CreateEventA
GetOverlappedResult
CloseHandle
SetEvent
GetLastError
WaitForSingleObject
ReadFile
WriteFile
GetStdHandle
GetTickCount
TlsFree
TlsSetValue
GetCurrentProcess
GetSystemTimeAdjustment
FindFirstFileA
FormatMessageA
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
TlsGetValue
TlsAlloc
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
GetModuleFileNameW
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount

user32

WinHelpA
PostQuitMessage
MessageBoxIndirectA
GetClipboardOwner
GetQueueStatus
GetForegroundWindow
GetCursorPos
GetMessageA
DispatchMessageA
GetWindowRect
LoadCursorA
DestroyWindow
SetActiveWindow
EndDialog
DialogBoxParamA
GetWindowPlacement
ShowWindow
GetCapture
IsDialogMessageA
GetWindowLongA
SetWindowPlacement
SetWindowTextA
MoveWindow
RegisterClassA
CreateDialogParamA
LoadIconA
FindWindowA
GetDesktopWindow
GetParent
ReleaseCapture
DefDlgProcA
EnableWindow
GetDC
SetWindowPos
CheckRadioButton
MessageBeep
RegisterWindowMessageA
GetDlgItemTextA
SetWindowLongA
MessageBoxA
IsDlgButtonChecked
CreateWindowExA
SetFocus
SendDlgItemMessageA
SetDlgItemTextA
SendMessageA
SetCapture
MapDialogRect
GetClientRect
GetDlgItem
CheckDlgButton
DrawEdge
InvalidateRect
ReleaseDC

gdi32

SelectObject
GetTextExtentPoint32A
GetTextExtentExPointA
GetDeviceCaps
TextOutA
DeleteObject
GetTextMetricsA
SetMapMode
CreateFontA

advapi32

SystemFunction036
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
CopySid
GetLengthSid
RegCreateKeyA
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExA
GetUserNameA

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA
ChooseColorA
ChooseFontA
GetSaveFileNameA

comctl32

ord14
ord13
ord15

ole32

CoCreateInstance

Exports

Exports

__map__disconnected
__map__do_config
__map__enum_settings_close
__map__enum_settings_next
__map__enum_settings_start
__map__get_last_attr
__map__get_version
__map__init_Procs
__map__load_config
__map__set_config
__map__set_transfer_ascii
__map__wcplg_close_sftp_session
__map__wcplg_do_sftp
__map__wcplg_free_current_dir_struct
__map__wcplg_get_current_dir_struct
__map__wcplg_get_last_error_msg
__map__wcplg_open_sftp_session

Sections

.text
Size: 351KB - Virtual size: 351KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c71f0db62252851163c848dcd4fa7c1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comdlg32

comctl32

ole32

Exports

Exports

Sections

.text Size: 351KB - Virtual size: 351KB

.rdata Size: 114KB - Virtual size: 114KB

.data Size: 4KB - Virtual size: 27KB

.gfids Size: 512B - Virtual size: 172B

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 351KB - Virtual size: 351KB

.rdata
Size: 114KB - Virtual size: 114KB

.data
Size: 4KB - Virtual size: 27KB

.gfids
Size: 512B - Virtual size: 172B

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 16KB - Virtual size: 15KB