19f8f36405521fb441d6d58e4c0fe01d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

19f8f36405521fb441d6d58e4c0fe01d_JaffaCakes118
Size

105KB
MD5

19f8f36405521fb441d6d58e4c0fe01d
SHA1

61c36bbe8a1275597d46230f75a3c78c47860c1e
SHA256

dc516a9924c465c82ad5bfcc66836c5b5fd75f48161a4290b25051bf582d4831
SHA512

b81d121a3ac1f01f21cb605798c12610bae2cb5e498f8709674db37c45a82131e4db1c4955e6820023ad8b018b1f5b8c4ddd69861f051d391f735614b45d8f77
SSDEEP

1536:keVa2hAUK0ENTPHuMQ2SobC9ju9qxlGZJ5WAWlc03Ef7rSIWbVTTH+LvZqyOAG:kCVENTUyC9nAWl/327rSbbVTTqvEyOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19f8f36405521fb441d6d58e4c0fe01d_JaffaCakes118

Files

19f8f36405521fb441d6d58e4c0fe01d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2548537cb8548ab4c152e2512870e3ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
CreateEventA
CloseHandle
WaitForSingleObject
ResetEvent
lstrcpyA
SetEvent
InterlockedExchange
CancelIo
Sleep
lstrlenA
GetPrivateProfileSectionNamesA
lstrcatA
GetWindowsDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
lstrcmpA
GetPrivateProfileStringA
GetVersionExA
DeleteFileA
GetLastError
CreateDirectoryA
GetFileAttributesA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
FindNextFileA
LocalReAlloc
FindFirstFileA
LocalAlloc
GetFileSize
ReadFile
SetFilePointer
MoveFileA
CreateFileA
GetModuleFileNameA
SetLastError
GetSystemDirectoryA
CreateProcessA
GetCurrentProcess
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
CreateThread
TerminateThread
MoveFileExA
GetTickCount
WriteFile
GetLocalTime
MapViewOfFile
CreateFileMappingA
HeapFree
GetProcessHeap
HeapAlloc
UnmapViewOfFile
LocalSize
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
OutputDebugStringA
DisconnectNamedPipe
TerminateProcess
PeekNamedPipe
WaitForMultipleObjects
CreatePipe
GlobalMemoryStatusEx
GetSystemInfo
ReleaseMutex
OpenEventA
SetErrorMode
CreateMutexA
SetUnhandledExceptionFilter
FreeConsole
lstrcmpiA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentThreadId
RaiseException

msvcrt

memset
??2@YAPAXI@Z
memcmp
strchr
malloc
strcpy
strcmp
free
putchar
_except_handler3
strrchr
sprintf
strcat
__CxxFrameHandler
atoi
strncmp
_errno
wcscpy
strncat
realloc
wcstombs
_beginthreadex
calloc
_initterm
_adjust_fdiv
strstr
strlen
_ftol
ceil
memmove
strncpy
memcpy
_strnicmp
??3@YAXPAX@Z
_strcmpi

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

netapi32

NetLocalGroupAddMembers
NetUserAdd

msvfw32

ICSendMessage

Exports

Exports

Fantasy

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2548537cb8548ab4c152e2512870e3ef

Headers

File Characteristics

Imports

kernel32

msvcrt

msvcp60

netapi32

msvfw32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 87KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 88KB - Virtual size: 87KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 6KB - Virtual size: 5KB