15adbb916f32ea68bb00488f65c0b443_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

15adbb916f32ea68bb00488f65c0b443_JaffaCakes118
Size

62KB
MD5

15adbb916f32ea68bb00488f65c0b443
SHA1

98f5a3cdcbcb769773b2a7e1e3fba585e0287715
SHA256

7ed173c95fb23634a51ee089ce3ef719134dc5110a38585163968e19886d3ee5
SHA512

5b1b6bff60e7627c454e6dbbbfb45886fc8367b0f651ebaccabbf060a4d3b13c97794b04a8fc61e4bd3efecb06c9064f2b8dd9a7561594eea7c33f14d7251739
SSDEEP

1536:LmnHvSJXQPhIA0DY5q/WT/uWBjTBrTH75tQszj:Lm6J42A0DhWTGWBB4sf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15adbb916f32ea68bb00488f65c0b443_JaffaCakes118

Files

15adbb916f32ea68bb00488f65c0b443_JaffaCakes118
.dll windows:5 windows x86 arch:x86

ff3703138d956bd20d3bdc34231fd12f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeBeginPeriod
timeEndPeriod

gdi32

CreateSolidBrush
SetRectRgn
CreateRectRgnIndirect
EnumFontsA
GetTextExtentPointA
SetAbortProc
SetEnhMetaFileBits
EndDoc
GetEnhMetaFilePaletteEntries
GdiFlush
GetClipRgn
GetFontLanguageInfo
SetBrushOrgEx
GetPaletteEntries
CloseEnhMetaFile
CreateEnhMetaFileA
MoveToEx
SetStretchBltMode

comctl32

ImageList_GetIconSize
ImageList_SetDragCursorImage
ImageList_BeginDrag
ImageList_Remove
ImageList_EndDrag

kernel32

VirtualQuery
CreateFileMappingA
GetLocaleInfoA
FindFirstFileA
GetFileAttributesA
IsValidLocale
SuspendThread
GetFileAttributesW
ResetEvent
RaiseException
GlobalFindAtomA
ReleaseMutex
lstrlenA
DeleteFileA
SizeofResource
GetThreadPriority
TerminateProcess
OpenMutexA
GetStartupInfoA
WaitForMultipleObjects
LoadResource
GetModuleHandleA
HeapAlloc
WideCharToMultiByte
lstrlenW
GetCommandLineW
UnmapViewOfFile
GetComputerNameA
ExitProcess
MapViewOfFileEx
TerminateProcess
GlobalFree
CloseHandle
EnumCalendarInfoA

user32

GetKeyNameTextW
LoadStringA
SetMenu
GetKeyState
GetScrollPos
GetKeyboardState
DestroyCursor
CharUpperA
ReuseDDElParam
EnableMenuItem
CharLowerA
CreateIconIndirect
GetWindow
ReleaseCapture
SetWindowTextA
GetClassNameW
GetMenu
GetWindowRect
DrawIcon
IntersectRect
RegisterClassW
SetWindowsHookExW
RemovePropA
DefWindowProcA
CheckMenuItem
GetDCEx
GetWindowTextA
LoadCursorA
CallNextHookEx
CreateCaret
SetRectEmpty
CopyImage
IsRectEmpty
ShowOwnedPopups
AdjustWindowRectEx
SetFocus

dmutssam

_FSinh
_LPoly
_LNan
_LDscale
_Hugeval
_LXbig
_Dscale

wininet

FtpOpenFileA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetWriteFile
HttpQueryInfoA

oleaut32

SafeArrayCreateVector
SafeArrayUnaccessData

comdlg32

ChooseFontA

ole32

CoCreateGuid
CoInitialize
OleSetClipboard

shell32

DragQueryFileA
DragQueryPoint
ShellExecuteExA

Exports

Exports

GetDefaultServer
FreeObjectInfo
BuildADsParentPath
CreateProcessNotify
DllClientCleanup
MigAlace
ConvertSidToU2Trustee
BerBvFree
FreeADsStr
Component
GetLDAPTypeName
DllClientStartup
ApphelpUpdateCacheEntry
AllocADsStr
SdbCloseApphelpInformation
BuildLDAPPathFromADsPath

Sections

.text
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff3703138d956bd20d3bdc34231fd12f

Headers

File Characteristics

Imports

winmm

gdi32

comctl32

kernel32

user32

dmutssam

wininet

oleaut32

comdlg32

ole32

shell32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB