2a48408281b892850cfa2961eb4c2223_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2a48408281b892850cfa2961eb4c2223_JaffaCakes118
Size

96KB
MD5

2a48408281b892850cfa2961eb4c2223
SHA1

7569f6dba3168bcfbd2026b9b14e991115d7dd98
SHA256

c49e44dc70ff51e6f35ba417b26973059bf30c4558d1738e62797bd4dac1a187
SHA512

e69eff1ebfc0758dbf26219a4e24a3c03dc1ccd720e43475233f47de41020c7602b6f018eebdfd0b31af4ad404128d3779b801dc8b8cd8491a6879d7250a2e87
SSDEEP

3072:xeyieNLemOzUkFwdKyirlTIBlAhnOkndkVZg:AmOz/FwdPEjhBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a48408281b892850cfa2961eb4c2223_JaffaCakes118

Files

2a48408281b892850cfa2961eb4c2223_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5b3b0c7edeaeae9c688c53a97d13bd11

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetVersion
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
LCMapStringA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
RtlUnwind
SearchPathA
SetEvent
SetHandleCount
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteFile
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GetLastError
GetFileType
GetEnvironmentStringsA
CloseHandle
GetCurrentProcess
GetCommandLineA
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ExitProcess
DeviceIoControl
CreateProcessA
CreateMutexA
CreateEventA
MultiByteToWideChar

advapi32

InitializeAcl
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
InitializeSecurityDescriptor
GetLengthSid
FreeSid
AllocateAndInitializeSid

winmm

waveInGetNumDevs
waveInGetDevCapsA
mixerOpen
mixerGetNumDevs
mixerGetID
mixerGetDevCapsA
mixerClose

user32

CreatePopupMenu
CreateWindowExA
DefWindowProcA
DestroyMenu
DispatchMessageA
GetClassNameA
GetCursorPos
GetDC
GetDesktopWindow
GetMenuCheckMarkDimensions
GetMessageA
GetSysColor
GetWindow
InsertMenuItemA
LoadCursorA
LoadIconA
LoadImageA
LoadStringA
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseDC
SendMessageA
SetForegroundWindow
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMessage

setupapi

SetupDiSetClassInstallParamsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInstanceIdA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller

Sections

.text
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b3b0c7edeaeae9c688c53a97d13bd11

Headers

File Characteristics

Imports

kernel32

advapi32

winmm

user32

setupapi

Sections

.text Size: 82KB - Virtual size: 84KB

.data Size: 9KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 4KB

.text
Size: 82KB - Virtual size: 84KB

.data
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB