24ae59d8f93571f7305d819d800b9c7c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

24ae59d8f93571f7305d819d800b9c7c_JaffaCakes118
Size

265KB
MD5

24ae59d8f93571f7305d819d800b9c7c
SHA1

76b5065aca025b5fd24aee2f70432bbf8c751370
SHA256

2dbf9bbb854f40d4deb45cf83c95e38597fbce951f86be9e2ad22a75951f9a29
SHA512

1e3b39a377e04d1ee323d7d13eb367a4f882dd92312d1c862aaee6d7af362a324525a95a4990508c8c096fcbc50aa4791e487f1183f1c8932a99dfa9e0e9ea5f
SSDEEP

6144:rszrIP3acuC5Cydti9Pet80gUTpVNBMVM4l4SzPiYK:4zcPTuCYZ9zDUpVNBMVM4piYK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24ae59d8f93571f7305d819d800b9c7c_JaffaCakes118

Files

24ae59d8f93571f7305d819d800b9c7c_JaffaCakes118
.dll windows:1 windows x86 arch:x86

91df03e9f6e2454cdc05a39a8591cd18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BeginUpdateResourceA
CreateEventW
CreateFileMappingA
CreateSemaphoreW
DosDateTimeToFileTime
EnumResourceLanguagesA
ExitProcess
FlushFileBuffers
FoldStringW
GetCommMask
GetCommState
GetConsoleAliasExesA
GetConsoleScreenBufferInfo
GetFileSize
GetFileType
GetHandleInformation
GetModuleFileNameA
GetTempPathA
GetTickCount
GlobalAddAtomW
GlobalFindAtomW
InterlockedCompareExchange
LocalShrink
LockFile
QueueUserAPC
RtlFillMemory
RtlMoveMemory
RtlZeroMemory
SetConsoleIcon
SetHandleInformation
SetLocaleInfoA
SetMailslotInfo
SetStdHandle
Sleep
VirtualAlloc
VirtualProtect
_hread
lstrcmpA
lstrcmpiA

user32

AdjustWindowRect
CallNextHookEx
CascadeChildWindows
CopyAcceleratorTableA
CreateIconFromResource
CreateMDIWindowA
DdeAccessData
DdeGetData
DdeInitializeA
DdeUnaccessData
DialogBoxIndirectParamA
DlgDirSelectExW
DrawIcon
EnumDisplaySettingsW
GetCapture
GetClassInfoExA
GetClassInfoExW
GetClassWord
GetForegroundWindow
GetListBoxInfo
GetUserObjectInformationA
GetWindowTextA
InsertMenuA
InsertMenuW
LoadCursorA
LookupIconIdFromDirectory
MessageBoxA
MessageBoxW
SendDlgItemMessageA
SetClipboardData
SetDlgItemTextW
SetMenu
SetMenuItemInfoW
SetSystemCursor
ShowCursor
ToAscii

gdi32

CreatePolyPolygonRgn
DeviceCapabilitiesExA
FrameRgn
GdiComment
GetBrushOrgEx
GetClipBox
GetClipRgn
GetColorSpace
GetMetaFileA
GetMetaFileBitsEx
GetNearestColor
GetPaletteEntries
GetPath
GetPixel
GetPixelFormat
GetTextFaceA
GetTextFaceW
GetTextMetricsA
GetViewportOrgEx
MaskBlt
OffsetWindowOrgEx
SetArcDirection
SetBitmapBits
SetMetaFileBitsEx
SetPixelFormat
SetRectRgn
SetTextColor
StretchBlt
WidenPath
gdiPlaySpoolStream

shell32

SHGetDesktopFolder
SHGetPathFromIDListA
SHGetPathFromIDListW
ShellExecuteExW

advapi32

AbortSystemShutdownW
BuildSecurityDescriptorA
CancelOverlappedAccess
ElfReportEventA
GetExplicitEntriesFromAclA
GetOldestEventLogRecord
GetServiceDisplayNameA
LsaQueryDomainInformationPolicy
LsaQueryInformationPolicy
NotifyBootConfigStatus
PrivilegeCheck
QueryServiceLockStatusW
RegEnumKeyA
RegFlushKey
RegOverridePredefKey
SetAclInformation
TrusteeAccessToObjectA

msvcrt

_execvpe
_getsystime
_wchmod
_wexecle
_wexecv
_wgetenv
_wopen
_wsearchenv
fprintf
iswascii
putwc
strtok
toupper
wcsncat

Exports

Exports

BIklvh
BrvkQpd
CKyWsfHWpcQ
CwUsRUz
CyVplUig
DiNcjpPfaexoX
ERtcpc
FRvIOelvjpKIvx
FTirdZqgfh
LGidwMnt
NekfssNKuPdH
PqQzldksdaiFUf
PrrSpfVX
QvuLYFqHQdp
SnziuU
ToTrGLMbSao
URneiYAvy
VZpFHuxNdHk
ValdIo
VbtVnzp
YJjmujyH
Ynftxejbtdyvz
ZCRXztjVnbzAGE
ZdSjcuZfaabXzt
ZrmvucI

Sections

.text
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddata
Size: 65KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 34KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ydata
Size: 145KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91df03e9f6e2454cdc05a39a8591cd18

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 11KB

.data Size: 5KB - Virtual size: 211KB

.ddata Size: 1024B - Virtual size: 571B

.ddata Size: 65KB - Virtual size: 133KB

.xdata Size: 34KB - Virtual size: 102KB

.ydata Size: 145KB - Virtual size: 214KB

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 11KB

.data
Size: 5KB - Virtual size: 211KB

.ddata
Size: 1024B - Virtual size: 571B

.ddata
Size: 65KB - Virtual size: 133KB

.xdata
Size: 34KB - Virtual size: 102KB

.ydata
Size: 145KB - Virtual size: 214KB

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 2KB - Virtual size: 1KB