2ef37d5bc8a937e98951f5034ba71ff0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2ef37d5bc8a937e98951f5034ba71ff0_JaffaCakes118
Size

51KB
MD5

2ef37d5bc8a937e98951f5034ba71ff0
SHA1

e9504a13301b3c91a9613bb24595403e01fabc81
SHA256

cf777a8f78e65c35f2c756d5a42dbe8d4f0aa2f828150371d3ac45ec2094a457
SHA512

61390186ad5ff70fac891c1cf900e838671674ea6dd210b4b3cbe40ee6f8829d1422d2a0996283eb40f89a92fa736c3e51a4a1b4ef2e3de5c84d452ba8f2a438
SSDEEP

1536:QEXGxiMPvBUlOX8KBoHqmk+51cXdqFvohF+q8:QmGAMPvGOX8qoB/1cXYQFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ef37d5bc8a937e98951f5034ba71ff0_JaffaCakes118

Files

2ef37d5bc8a937e98951f5034ba71ff0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e3b217cd5ad1948bbcbd65db83a6167c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

TlsGetValue
VirtualAlloc
SetEvent
GetSystemTime
HeapUnlock
ExpandEnvironmentStringsA
lstrcpyA
GetFileSize
CreateDirectoryA
OpenMutexA
LocalAlloc
InterlockedDecrement
GetFileType
GetUserDefaultLangID
LockResource
DosDateTimeToFileTime
GetThreadLocale
CloseHandle

clb

ClbStyleW

ntdll

NtCreateTimer
ZwCreateEvent
NtSetTimer
ZwClose

Exports

Exports

GetBestInterfaceEx
IcmpCreateFile
SetTcpEntry
IcmpParseReplies
CreateProcessNotify
DllClientCleanup
fconce
Icmp6SendEcho2
DllClientStartup
GetAdaptersAddresses
InternalGetIpAddrTable
Icmp6ParseReplies
GetOwnerModuleFromTcpEntry
InternalSetIfEntry
GetIfEntry
do_echo_req
InternalCreateIpForwardEntry
GetPerAdapterInfo
InternalGetIpNetTable
GetUniDirectionalAdapterInfo
GetIfTable
GetAdapterOrderMap
SetIpStatistics
InternalSetIpForwardEntry
EnableRouter
SetIpNetEntry
IpRenewAddress
GetTcpTable
InternalDeleteIpForwardEntry
SetAdapterIpAddress
SetIpTTL
GetUdpStatisticsEx
NhpAllocateAndGetInterfaceInfoFromStack
NhGetGuidFromInterfaceName
InternalGetIfTable
GetUdpStatistics
GetIpErrorString
InternalSetIpStats
AddIPAddress
CancelIPChangeNotify
IcmpCloseHandle
GetRTTAndHopCount
GetIpNetTable
GetIpForwardTable
FlushIpNetTable
DeleteProxyArpEntry
NotifyAddrChange
do_echo_rep
GetNumberOfInterfaces
GetExtendedUdpTable
CreateIpForwardEntry
register_icmp
InternalGetUdpTable
DeleteIpForwardEntry
GetBestInterface
CreateIpNetEntry
InternalCreateIpNetEntry
SetIfEntry
GetNetworkParams
GetIcmpStatisticsEx
DeleteIpNetEntry
DisableMediaSense
GetOwnerModuleFromUdpEntry
IcmpSendEcho
GetFriendlyIfIndex
InternalGetTcpTable
GetIcmpStatistics
GetAdapterIndex
RestoreMediaSense
Icmp6CreateFile
InternalSetTcpEntry
NTTimeToNTPTime
GetBestRoute
GetTcpStatistics
GetInterfaceInfo
UnenableRouter
InternalGetIpForwardTable
DeleteIPAddress
CreateProxyArpEntry

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3b217cd5ad1948bbcbd65db83a6167c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

clb

ntdll

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.data Size: 11KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 37KB - Virtual size: 37KB

.data
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB