8a3addffc21d53bfac11a561727aa023_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8a3addffc21d53bfac11a561727aa023_JaffaCakes118
Size

176KB
MD5

8a3addffc21d53bfac11a561727aa023
SHA1

69f37b9189a2555cf6c07fadd6d8600085ecfb4d
SHA256

4b5f2ad7132bd658e5767cf7adf47b381d84cde5438d893f16a38b3f2e3998c9
SHA512

62a9bb202977e64073bde477e825178e321c0bd76179f87aa9049b790d6e7d137bfee07be16cb9ad5f9ac7b75a9048c7902755d7bdf31b81365a328ce48b1786
SSDEEP

3072:XOcZFZM4I2lY/ONZUaGXE0awj/NEcD3xp4SKHWuCdnblz9tJGNd5Rn8f:XZZM4I2GmNZUbJEcbaMdblz9/GNdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a3addffc21d53bfac11a561727aa023_JaffaCakes118

Files

8a3addffc21d53bfac11a561727aa023_JaffaCakes118
.dll regsvr32 windows:6 windows x86 arch:x86

cc6ca3604e2ae6a4e85abd331e21173e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msorcl32.pdb

Imports

msvcrt

fwrite
_tempnam
_open
fseek
_fdopen
strstr
fclose
fread
ftell
_endthreadex
strchr
isxdigit
strcspn
strncmp
_stricmp
bsearch
_ultoa
strtoul
atoi
_HUGE
strtod
localeconv
floor
_ftol2_sse
atof
_gcvt
tolower
_XcptFilter
malloc
_initterm
_amsg_exit
_adjust_fdiv
_except_handler4_common
_unlock
__dllonexit
_lock
_onexit
free
isspace
strncpy_s
strrchr
isdigit
atol
_strnicmp
isalpha
isalnum
memset
toupper
memcpy
_vsnprintf
_beginthreadex

kernel32

LocalAlloc
GetFileSize
LocalUnlock
LocalFree
CreateFileA
GetSystemDirectoryA
LocalLock
MoveFileExA
SearchPathA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
GetLocalTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrcmpA
lstrcmpiA
CreateEventA
ResetEvent
GetCurrentThreadId
SetEvent
ReleaseMutex
HeapAlloc
HeapDestroy
HeapCreate
GetTempPathA
OutputDebugStringA
lstrlenA
GetModuleHandleA
GetDriveTypeA
GetFullPathNameA
ExpandEnvironmentStringsA
InterlockedExchange
GetProcAddress
FreeLibrary
GetVersion
VirtualQuery
HeapFree
CloseHandle
LoadLibraryA
WaitForSingleObject
HeapReAlloc
IsDBCSLeadByte
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
CreateMutexA
DeleteCriticalSection
DisableThreadLibraryCalls
GetSystemInfo
InitializeCriticalSection

user32

LoadStringA
CharUpperA
GetDlgItem
SetWindowPos
EnableWindow
CheckDlgButton
SendDlgItemMessageA
IsDlgButtonChecked
GetDlgCtrlID
SetFocus
GetParent
GetWindowRect
GetClientRect
ClientToScreen
GetDesktopWindow
MoveWindow
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
MessageBoxW
MessageBoxA
LoadStringW
GetCursor
DialogBoxParamA
SetCursor
GetWindowLongA
GetDlgItemTextA
EndDialog
SetWindowTextA
SetWindowLongA
SetDlgItemTextA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

ConfigDSN
DllMain
DllRegisterServer
DllUnregisterServer
LoadByOrdinal
SQLAllocConnect
SQLAllocEnv
SQLAllocStmt
SQLBindCol
SQLBindParameter
SQLBrowseConnect
SQLCancel
SQLColAttributes
SQLColumns
SQLConnect
SQLDescribeCol
SQLDescribeParam
SQLDisconnect
SQLDriverConnect
SQLError
SQLExecDirect
SQLExecute
SQLExtendedFetch
SQLFetch
SQLForeignKeys
SQLFreeConnect
SQLFreeEnv
SQLFreeStmt
SQLGetConnectOption
SQLGetCursorName
SQLGetData
SQLGetInfo
SQLGetStmtOption
SQLGetTypeInfo
SQLMoreResults
SQLNativeSql
SQLNumParams
SQLNumResultCols
SQLParamData
SQLPrepare
SQLPrimaryKeys
SQLProcedureColumns
SQLProcedures
SQLPutData
SQLRowCount
SQLSetConnectOption
SQLSetCursorName
SQLSetPos
SQLSetScrollOptions
SQLSetStmtOption
SQLSpecialColumns
SQLStatistics
SQLTables
SQLTransact

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdbid
Size: 4KB - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc6ca3604e2ae6a4e85abd331e21173e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 144KB - Virtual size: 140KB

.data Size: 12KB - Virtual size: 15KB

.sdbid Size: 4KB - Virtual size: 484B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 144KB - Virtual size: 140KB

.data
Size: 12KB - Virtual size: 15KB

.sdbid
Size: 4KB - Virtual size: 484B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB