27b01130d1f6e08cc7a25c73015b974d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

27b01130d1f6e08cc7a25c73015b974d_JaffaCakes118
Size

104KB
MD5

27b01130d1f6e08cc7a25c73015b974d
SHA1

7e25c48566515193092ee08cb170d7e8a1dcf7be
SHA256

2ec3660618077c2abd4c7f62540a3f735143d01243c6ceef7e79c2877ee94c58
SHA512

17e3bc4feeb96d01c6d5220a74ccc47ad5c2d45ccc0d65364ddd257624186ca99272608c6ccd2a68678e5841ca523d9994896db2d1414451688580f96d474cdd
SSDEEP

1536:G4s1hRfsPZp48cIxFAIhG6JxXKW0MFzRpdEoIMvYjzZCB1Gl0Gzsm:Xs1hRWp42xFJGVWNneA1Gl0GH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27b01130d1f6e08cc7a25c73015b974d_JaffaCakes118

Files

27b01130d1f6e08cc7a25c73015b974d_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

2dbc731ad7e78f348d2abb0d6b3f2e66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

SHDeleteKeyW

wininet

InternetOpenW
InternetReadFile
InternetOpenUrlW
HttpQueryInfoW
InternetCloseHandle

urlmon

URLDownloadToFileA

kernel32

GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
WideCharToMultiByte
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
LoadLibraryA
GetPrivateProfileStringW
Sleep
MultiByteToWideChar
CloseHandle
ReadFile
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WaitForSingleObject
CreateMutexW
CreateDirectoryW
DeleteFileW
GetVolumeInformationA
LCMapStringA
GetModuleHandleA
GetStringTypeA
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
UnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
SetEndOfFile
VirtualProtect
GetSystemInfo
GetStringTypeW
HeapSize
GetCurrentProcess
TerminateProcess
HeapReAlloc
WriteFile
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetUnhandledExceptionFilter
VirtualQuery
RtlUnwind
ExitProcess
RaiseException
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
InterlockedExchange

user32

ClientToScreen
SetWindowLongW
ShowWindow
DestroyWindow
wsprintfA
GetClientRect
GetParent
FindWindowExW
DestroyMenu
InsertMenuItemW
GetCursorPos
TrackPopupMenu
CreatePopupMenu
GetMenuItemCount
GetMenuStringW
GetWindowTextW
LoadStringW
MessageBoxW
PostMessageW
IsWindow
CreateWindowExW
wsprintfW
DialogBoxParamW
CallWindowProcW
GetWindowLongW
EndDialog
IsDlgButtonChecked
CheckDlgButton
SendMessageW
TranslateMessage
DispatchMessageW
SetFocus

advapi32

RegCreateKeyA
RegOpenKeyExA
RegEnumKeyExA
RegFlushKey
RegDeleteValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW

shell32

SHGetSpecialFolderPathW

ole32

StringFromIID
CoCreateInstance
CoInitialize
CoGetMalloc
CoUninitialize

oleaut32

SysAllocString
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dbc731ad7e78f348d2abb0d6b3f2e66

Headers

File Characteristics

Imports

shlwapi

wininet

urlmon

kernel32

user32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 8KB - Virtual size: 6KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 8KB - Virtual size: 6KB