24c82db8ad212503d8ee131cf5ebda96_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

24c82db8ad212503d8ee131cf5ebda96_JaffaCakes118
Size

329KB
MD5

24c82db8ad212503d8ee131cf5ebda96
SHA1

5efda70b6236a02f84878a1e6fcbf91d64e3bb55
SHA256

1db5b0f133ec7d134a4e01c0d1b234fbbfc23ed1c3d4e2017b933901be831985
SHA512

109b2f2b61ac019ab217588201628108c0b462f156229c75ced4ac97c7daeffde08ccb332a5c69e23cfcfd3af3923cdd54984229b835af484c84ba965a4380ee
SSDEEP

6144:a482ntbbxmBWUAhpcyCFhe5WVypNAZH7MS34219hs+xBID1/:22ntbbtUuMYyCNAZnr19hNxBID1/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24c82db8ad212503d8ee131cf5ebda96_JaffaCakes118

Files

24c82db8ad212503d8ee131cf5ebda96_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6456b8bf3895c684d6785cb687a67aeb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msorcl32

SQLProcedures
SQLSpecialColumns
SQLGetCursorName
SQLProcedureColumns
SQLFreeStmt
SQLSetCursorName
SQLError
SQLGetInfo
SQLParamData
SQLTransact
SQLGetConnectOption
SQLConnect
ConfigDSN
SQLDisconnect
SQLDescribeParam
DllRegisterServer
SQLSetPos
SQLAllocEnv
SQLGetStmtOption
SQLDriverConnect
SQLNumParams
SQLGetData
SQLColumns
SQLExecute
DllMain
SQLBrowseConnect
SQLExtendedFetch
SQLBindCol
SQLGetTypeInfo
SQLAllocConnect
SQLBindParameter
SQLSetConnectOption
SQLNativeSql
SQLCancel
SQLPutData
SQLFreeConnect
SQLSetStmtOption
SQLMoreResults
SQLRowCount
SQLPrepare
SQLFreeEnv
SQLSetScrollOptions
SQLDescribeCol
SQLStatistics
SQLExecDirect
SQLAllocStmt

mscms

GetPS2ColorSpaceArray
GetCMMInfo
GetCountColorProfileElements
CreateDeviceLinkProfile
InstallColorProfileA
AssociateColorProfileWithDeviceW
InternalGetDeviceConfig
RegisterCMMA
UninstallColorProfileW
TranslateBitmapBits
SelectCMM
InternalSetDeviceConfig
CheckColors
InternalGetPS2ColorSpaceArray
DisassociateColorProfileFromDeviceA
ConvertColorNameToIndex
UninstallColorProfileA
InstallColorProfileW
ConvertIndexToColorName
SetStandardColorSpaceProfileW
GetPS2ColorRenderingDictionary
SpoolerCopyFileEvent
SetColorProfileElementSize
TranslateColors
EnumColorProfilesW
OpenColorProfileW
AssociateColorProfileWithDeviceA
CloseColorProfile
InternalGetPS2ColorRenderingDictionary
OpenColorProfileA
IsColorProfileValid
GetStandardColorSpaceProfileA
GetColorDirectoryA
GenerateCopyFilePaths
UnregisterCMMW
RegisterCMMW
GetNamedProfileInfo
GetPS2ColorRenderingIntent
InternalGetPS2PreviewCRD
SetColorProfileElement
CreateMultiProfileTransform
SetColorProfileElementReference
DeleteColorTransform
CreateProfileFromLogColorSpaceA
SetStandardColorSpaceProfileA
GetColorProfileHeader
SetColorProfileHeader
CheckBitmapBits

kernel32

SetEvent
FreeLibrary
ExpandEnvironmentStringsW
TerminateThread
GetCurrentProcessId
LeaveCriticalSection
GetCurrentProcess
GetFileInformationByHandle
GetSystemDirectoryW
GetCurrentDirectoryW
LoadLibraryA
GetProcAddress
VirtualFree
InitializeCriticalSection
GetComputerNameW
SetLastError
SetFileAttributesW
WritePrivateProfileStringW
BackupSeek
DeleteFileW
SetPriorityClass
GetTimeZoneInformation
SetUnhandledExceptionFilter
WriteFile
WideCharToMultiByte
EnterCriticalSection
GetEnvironmentVariableW
CreateHardLinkW
GetSystemTimeAsFileTime
GetVolumeNameForVolumeMountPointW
FindVolumeMountPointClose
SetFileTime
LocalFileTimeToFileTime
GetLogicalDriveStringsW
GetPriorityClass
WaitForSingleObject
BackupRead
SetEndOfFile
CreateSemaphoreW
GetCompressedFileSizeW
FindClose
SetCurrentDirectoryW
LoadLibraryW
FindNextFileW
FindFirstFileW
SetTapeParameters
GetTapePosition
GetVersionExA
GetVolumeInformationW
GetCurrentThreadId
RemoveDirectoryW
GetDiskFreeSpaceExW
FormatMessageW
CreateEventW
GetSystemTime
GetTickCount
VirtualAlloc
CompareStringW
ReleaseMutex
GlobalFree
GetVolumePathNameW
ReadFile
CloseHandle
SystemTimeToFileTime
GetLastError
GetDateFormatW
FindNextVolumeMountPointW
GetFileAttributesW
CreateMutexW
HeapAlloc
ExitThread
GetTimeFormatW
TerminateProcess
WriteTapemark
LockFile
SetFileShortNameW
EraseTape
GetPrivateProfileStringW
CloseHandle
GetLocalTime
UnhandledExceptionFilter
MoveFileExW
FindFirstVolumeMountPointW
CreateFileW
GlobalAlloc
Sleep
LocalFree
LocalFree
SystemTimeToTzSpecificLocalTime
SetErrorMode
GetStartupInfoW
ReleaseSemaphore
GetUserDefaultLCID
FileTimeToLocalFileTime
GetWindowsDirectoryW
BackupWrite
GetExitCodeThread
HeapFree
GetCurrentThread
MultiByteToWideChar
GetModuleFileNameW
VerSetConditionMask
CreateDirectoryW
DeleteCriticalSection
GetTapeParameters
GetTickCount

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6456b8bf3895c684d6785cb687a67aeb

Headers

DLL Characteristics

File Characteristics

Imports

msorcl32

mscms

kernel32

Sections

.text Size: 176KB - Virtual size: 176KB

.data Size: 55KB - Virtual size: 54KB

.rsrc Size: 97KB - Virtual size: 600KB

.text
Size: 176KB - Virtual size: 176KB

.data
Size: 55KB - Virtual size: 54KB

.rsrc
Size: 97KB - Virtual size: 600KB