2a0d39be55812bdaf6682d5081c29211_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2a0d39be55812bdaf6682d5081c29211_JaffaCakes118
Size

35KB
MD5

2a0d39be55812bdaf6682d5081c29211
SHA1

dec98659827602755b89f7d764b056590addc193
SHA256

05eb9fb5f4091bcc77977068354ebdf6a7fdc095e84dafe036addf2cee3556d5
SHA512

80f51e1c5fa8e28734b0961adbb6ad791c4ba451cf3ab2e1acc17d12edc4b862de6e89bbee04af8b7e6c248d989af9f288ef81242a2a2a83dfccadb74ef43e61
SSDEEP

768:/lQ8wbX7WLWfmqNLsku7IfrjzdRRS8azkfy/owttpItZYCu:FaCWfmq1CsfTaJsZYZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a0d39be55812bdaf6682d5081c29211_JaffaCakes118

Files

2a0d39be55812bdaf6682d5081c29211_JaffaCakes118
.dll windows:1 windows x86 arch:x86

a520c1a13b86b9e370da86317ca5e4b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BackupRead
DefineDosDeviceW
EnumCalendarInfoW
ExitProcess
FindClose
GetCommMask
GetCommState
GetCompressedFileSizeA
GetConsoleAliasExesA
GetConsoleAliasesA
GetConsoleAliasesW
GetDefaultCommConfigA
GetFileSize
GetFileType
GetNumberFormatW
GetNumberOfConsoleMouseButtons
GetStringTypeExA
GetStringTypeExW
GlobalUnfix
Heap32First
InterlockedExchangeAdd
OpenMutexA
PeekNamedPipe
SetConsoleCP
SetCurrentDirectoryW
SetFileApisToANSI
SetNamedPipeHandleState
SetThreadAffinityMask
ShowConsoleCursor
Sleep
TlsAlloc
TransmitCommChar
VirtualProtect
WriteConsoleW
WriteFileEx
_lclose
_lopen
lstrcmpA
lstrcmpiA

user32

AttachThreadInput
BlockInput
CheckMenuItem
CloseDesktop
CreateCaret
CreateDialogParamW
DdeDisconnect
DdeUninitialize
DispatchMessageW
EndDeferWindowPos
EnumDesktopsA
EnumWindows
GetClassInfoExW
GetClassWord
GetDlgItem
GetMenuState
GetParent
GetPropA
GetTitleBarInfo
GetUserObjectInformationA
LoadAcceleratorsW
LoadCursorFromFileW
OffsetRect
PeekMessageW
PtInRect
RegisterWindowMessageA
SetFocus
SetMenuItemInfoW
SetUserObjectInformationW
ValidateRect
WindowFromPoint

gdi32

CreateFontW
DeleteEnhMetaFile
EnumFontFamiliesA
GdiComment
GetCharWidthFloatW
GetClipBox
GetClipRgn
GetColorSpace
GetCurrentObject
GetCurrentPositionEx
GetDCOrgEx
GetDeviceGammaRamp
GetLogColorSpaceW
GetPath
GetPixel
GetPixelFormat
GetTextFaceA
GetTextFaceW
PolyBezierTo
SelectObject
SetTextJustification

comdlg32

ChooseFontW

comctl32

ImageList_DragLeave

shell32

SHBrowseForFolderA
SHFileOperationW

advapi32

AccessCheck
AddAce
BuildSecurityDescriptorW
BuildTrusteeWithNameA
CryptGenKey
ElfNumberOfRecords
ElfOldestRecord
ElfReportEventW
EncryptFileW
GetCurrentHwProfileA
GetExplicitEntriesFromAclW
GetLengthSid
GetSecurityInfoExW
GetServiceKeyNameW
LsaQueryInfoTrustedDomain
RegCreateKeyW
RegLoadKeyA
RegQueryMultipleValuesW
SetServiceStatus

msvcrt

_callnewh
_chdrive
_execvp
_heapused
_outpd
_spawnvp
_strncoll
_unlock
_wenviron
_wexecle
_wexecv
_wexecvp
fopen
iswalnum
iswctype
perror
realloc
rename
strncpy
tan
towupper
ungetwc

Exports

Exports

AuIGxlp
AyBxcgPhGgCUOEd
Erhnwb
LwesimJvqycI
PuyHbAuCEQGfaai
QihpwwaANLeUjwwzg
QkjOfliofg
SnhicxHNzXm
TVfEpLeBwutDxlf
TopTOXNoehdsfhk
UjFrftmwu

Sections

.text
Size: 7KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a520c1a13b86b9e370da86317ca5e4b7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

comctl32

shell32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 83KB

.data Size: 23KB - Virtual size: 31KB

.xdata Size: 512B - Virtual size: 309B

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 83KB

.data
Size: 23KB - Virtual size: 31KB

.xdata
Size: 512B - Virtual size: 309B

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 1KB - Virtual size: 1KB