15e1accf080dcc374ad94be87ec40465_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

15e1accf080dcc374ad94be87ec40465_JaffaCakes118
Size

32KB
MD5

15e1accf080dcc374ad94be87ec40465
SHA1

04b983b999c47b917e0b1c5cea66d59a0f371c7a
SHA256

97abb593f1bf8d2e265aaf6ef0d2306e4ee58b586a595928a03290597bcd4395
SHA512

97a3c5d39c76c44a5baf32e93dfd21932f9552708ed3bb54ae71745571672979781b1ec13565ce3850474caa6804069a1e3353766c98fa9d6b8eca9df23188ce
SSDEEP

768:GI4onouU/nshVRfPhuix0FwhIV/23QVBSo9b1dEJ:3ouU/nshVRfPh8FwhIV/2WwoJHE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15e1accf080dcc374ad94be87ec40465_JaffaCakes118

Files

15e1accf080dcc374ad94be87ec40465_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ca054269f1bbcb86af15a289eb4514b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
CreateFileA
MoveFileA
WriteFile
MultiByteToWideChar
FindNextFileA
GetFullPathNameA
FindFirstFileA
SetCurrentDirectoryA
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetDriveTypeA
GetLogicalDriveStringsA
ReadFile
TerminateProcess
CreateProcessA
GetStartupInfoA
CreatePipe
GetCurrentDirectoryA
lstrcmpA
CreateMutexA
OpenMutexA
SetThreadPriority
CreateThread
GetModuleFileNameA
GetStringTypeW
GetStringTypeA
TerminateThread
ExitThread
CloseHandle
GetLocalTime
RtlUnwind
GetEnvironmentVariableA
lstrcatA
DeleteFileA
MoveFileExA
Sleep
lstrcpyA
lstrlenA
lstrcpynA
GlobalAlloc
WinExec
GlobalFree

user32

EnumWindows
FindWindowA
ShowWindow
EnableWindow
SetWindowTextA
GetForegroundWindow
SendMessageA
GetSystemMetrics
SystemParametersInfoA
GetWindowTextA
IsWindowVisible
ExitWindowsEx

gdi32

DeleteDC
CreateDIBSection
DeleteObject
CreateCompatibleDC
CreateDCA
RestoreDC
BitBlt
GetDeviceCaps
SaveDC
SelectObject

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

ws2_32

WSACleanup
send
htons
inet_addr
WSAStartup
socket
recv
connect

wininet

InternetOpenA
InternetCloseHandle
InternetConnectA
FtpPutFileA
FtpGetFileA

winmm

mciSendStringA

gdiplus

GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdiplusStartup
GdiplusShutdown

Exports

Exports

AcceptEx
EnumProtocolsA
EnumProtocolsW
GetAcceptExSockaddrs
GetAddressByNameA
GetAddressByNameW
GetNameByTypeA
GetNameByTypeW
GetServiceA
GetServiceW
GetTypeByNameA
GetTypeByNameW
MigrateWinsockConfiguration
NPLoadNameSpaces
SetServiceA
SetServiceW
TransmitFile
WEP
WSAAsyncGetHostByAddr
WSAAsyncGetHostByName
WSAAsyncGetProtoByName
WSAAsyncGetProtoByNumber
WSAAsyncGetServByName
WSAAsyncGetServByPort
WSAAsyncSelect
WSACancelAsyncRequest
WSACancelBlockingCall
WSACleanup
WSAGetLastError
WSAIsBlocking
WSARecvEx
WSASetBlockingHook
WSASetLastError
WSAStartup
WSAUnhookBlockingHook
WSApSetPostRoutine
__WSAFDIsSet
accept
bind
closesocket
connect
dn_expand
gethostbyaddr
gethostbyname
gethostname
getnetbyname
getpeername
getprotobyname
getprotobynumber
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_network
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
rcmd
recv
recvfrom
rexec
rresvport
s_perror
select
send
sendto
sethostname
setsockopt
shutdown
socket

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca054269f1bbcb86af15a289eb4514b2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

wininet

winmm

gdiplus

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 1KB