2a964ef6b4dcb6a8d9dd56735bc112fc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2a964ef6b4dcb6a8d9dd56735bc112fc_JaffaCakes118
Size

213KB
MD5

2a964ef6b4dcb6a8d9dd56735bc112fc
SHA1

a2661d3f135066c6053f0ab7909d0303b01bcac9
SHA256

811f6c8742387977498a217c0190f751ccf93639b0130475669da87b4583bb6d
SHA512

30b26dd5725609ce1a55c22ac758a15c0a222452dbb101be4cd19532b3c998a7c04b6d77b446110f692c70c5bdf31335b1545f9c02aaba0d0284cd54c2cef0b9
SSDEEP

6144:tfhMoe7SPjQR3+hjUhIL8YWY1G3xJxzb9Q/S:1xSSPA3UjKIL8ZWSzx/9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a964ef6b4dcb6a8d9dd56735bc112fc_JaffaCakes118

Files

2a964ef6b4dcb6a8d9dd56735bc112fc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8da86f833deb9d9a5d9d682df4975278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

cfgmgr32

CM_Get_DevNode_Status

kernel32

AddAtomA
CloseHandle
CreateEventA
CreateFileA
DeviceIoControl
FindAtomA
FormatMessageA
FreeLibrary
GetAtomNameA
GetFullPathNameA
GetLastError
GetModuleHandleA
GetOverlappedResult
GetProcAddress
GetVersion
GetVersionExA
LoadLibraryA
OutputDebugStringA
ResetEvent
SetEnvironmentVariableA
Sleep
WaitForSingleObject

msvcrt

_strlwr
__dllonexit
_assert
_errno
_iob
_snprintf
_vsnprintf
abort
atoi
fclose
fflush
fgets
fgetws
fopen
fprintf
fputc
fputs
fputws
free
fwrite
getenv
malloc
memcpy
memmove
memset
realloc
sprintf
strcmp
strcpy
strerror
strlen
strstr
wcsstr

setupapi

SetupCloseInfFile
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDevRegKey
SetupDiSetClassInstallParamsA
SetupDiSetDeviceRegistryPropertyA
SetupFindFirstLineA
SetupFindNextLine
SetupGetStringFieldA
SetupOpenInfFileA

user32

FindWindowA
PostMessageA

Exports

Exports

usb_bulk_read
usb_bulk_setup_async
usb_bulk_write
usb_cancel_async
usb_claim_interface
usb_clear_halt
usb_close
usb_control_msg
usb_device
usb_find_busses
usb_find_devices
usb_free_async
usb_get_busses
usb_get_descriptor
usb_get_descriptor_by_endpoint
usb_get_string
usb_get_string_simple
usb_get_version
usb_init
usb_install_driver_np
usb_install_driver_np_rundll
usb_install_needs_restart_np
usb_install_service_np
usb_install_service_np_rundll
usb_interrupt_read
usb_interrupt_setup_async
usb_interrupt_write
usb_isochronous_setup_async
usb_open
usb_reap_async
usb_reap_async_nocancel
usb_release_interface
usb_reset
usb_resetep
usb_set_altinterface
usb_set_configuration
usb_set_debug
usb_strerror
usb_submit_async
usb_touch_inf_file_np
usb_touch_inf_file_np_rundll
usb_uninstall_service_np
usb_uninstall_service_np_rundll

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 912B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8da86f833deb9d9a5d9d682df4975278

Headers

File Characteristics

Imports

advapi32

cfgmgr32

kernel32

msvcrt

setupapi

user32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 24KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 7KB - Virtual size: 7KB

.bss Size: - Virtual size: 912B

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 174KB - Virtual size: 174KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 24KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 7KB - Virtual size: 7KB

.bss
Size: - Virtual size: 912B

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 174KB - Virtual size: 174KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 1KB - Virtual size: 1KB