2104321e3cd72e618c9d96f64c288c73_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2104321e3cd72e618c9d96f64c288c73_JaffaCakes118
Size

328KB
MD5

2104321e3cd72e618c9d96f64c288c73
SHA1

d54df66f8e1ecd1114d0f3e04fd6b0d8d2b612f4
SHA256

9bb7e042d9a7c3cbfdd36977a25f8237f9bc7097aff4becc69b9b05226375b6f
SHA512

5926e52fbe32e4b2b96b37c60a9dc03e33539a3014a765a3bbdfaa04f3d46b664c7c689126a91074a93783ab593e16d285a3f0586c1c0f6641fd18012cf9cbe5
SSDEEP

3072:WSOXWUUppOxzbdLtm8eC+21Lrhg1ymFVwjgQDWhi1VeD14pmJLTQRcVvrMZdrkie:YypAtjJ1RnJUbNAki+Rj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2104321e3cd72e618c9d96f64c288c73_JaffaCakes118

Files

2104321e3cd72e618c9d96f64c288c73_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8b59b8673a7d6987713c419632a57865

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
CloseHandle
GetModuleFileNameW
CreateDirectoryW
MoveFileW
FindFirstFileW
FindClose
GetProcAddress
LoadLibraryW
GetLastError
MultiByteToWideChar
CreateFileW
LocalFileTimeToFileTime
GetFileAttributesW
WideCharToMultiByte
SetFileTime
ReadFile
GetCurrentDirectoryW
SetFilePointer
DebugBreak
CreateFileA
SetEndOfFile
lstrcpynW
Sleep
GetSystemTime
SystemTimeToFileTime
WaitForSingleObject
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
FreeLibrary
LoadLibraryA
InitializeCriticalSection
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualQuery

user32

MessageBoxW
GetDesktopWindow
GetWindow

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

Sections

.text
Size: 280KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b59b8673a7d6987713c419632a57865

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 280KB - Virtual size: 278KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 24KB - Virtual size: 20KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 280KB - Virtual size: 278KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 24KB - Virtual size: 20KB

.reloc
Size: 12KB - Virtual size: 11KB