307739463a288a188d4234d330ce1125_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

307739463a288a188d4234d330ce1125_JaffaCakes118
Size

111KB
MD5

307739463a288a188d4234d330ce1125
SHA1

52d08e9b45f48ac32cf0bf38a5d9c755736cdae9
SHA256

0c9c44312ebb73c642f862d2872167fa29cd004d70c6f93e606a15e18788eae4
SHA512

dba5c3b9f1f9d27aa1bbf01cc717b273a93274fea235909eaa97722b0a2d1b6e28b09d5fe75c083cf2b60112435752516e3274ec88bde62743be49b0302fdc1f
SSDEEP

1536:268geWwFQL9lMbN1pFiTQhpyDm0YhHWwNs4/v5zQ/E3C1tRAc8D4pe60CqvKMMi9:26pL3WkQGDmlts1vgEpfUKMMiU1m9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
307739463a288a188d4234d330ce1125_JaffaCakes118

Files

307739463a288a188d4234d330ce1125_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e2c248f75eba14c011b76c46e51f587a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DeleteFileA
ExitProcess
FlushFileBuffers
FreeResource
GetACP
GetCommandLineA
GetLastError
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTimeAsFileTime
HeapAlloc
InterlockedIncrement
RtlUnwind
SetErrorMode
SetLastError
WriteFile
WritePrivateProfileSectionA
lstrcatA
lstrcmpA

advapi32

RegCloseKey
RegEnumKeyA
RegLoadKeyA
RegOpenKeyExA
RegQueryValueA
LookupPrivilegeValueA

ole32

DoDragDrop
GetRunningObjectTable
OleInitialize
OleUninitialize
ReadClassStg
ReleaseStgMedium
StringFromGUID2
WriteClassStg
CoCreateInstance
CoInitialize
CoRegisterMessageFilter
CoGetClassObject
CoResumeClassObjects
CoRevokeClassObject
CoUninitialize
CreateOleAdviseHolder

user32

MessageBoxA
OffsetRect
LoadBitmapA
GetWindowTextA
GetDlgItem
GetCursor
EqualRect
EndMenu
EmptyClipboard
DrawCaption
DefDlgProcA
CreateMenu
CreateIcon
CreateDesktopW
CreateDesktopA
BeginPaint
CreateAcceleratorTableA

shell32

ShellExecuteW
Shell_NotifyIconA
ShellExecuteExA
SHBindToParent
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc

shlwapi

SHAutoComplete
StrChrA
PathQuoteSpacesA
PathAppendA
PathCompactPathExA
PathMatchSpecA

msvcrt

memchr
fflush
memcpy
memmove
memset
strchr
strcmp

oleaut32

SysAllocStringLen
SysFreeString
VariantClear
VariantCopyInd
SysStringLen
LoadTypeLib

Exports

Exports

Bljka
Jmxb
Lzmgrb
Nknhujpxydv
Rngmcjyx
Rwnm
Sbjvgdvhevc
Soxmlv
Udihl
Vnazoqbyjp
Vv
Yyhpwhoedv

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2c248f75eba14c011b76c46e51f587a

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

user32

shell32

shlwapi

msvcrt

oleaut32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 33KB - Virtual size: 36KB

.data Size: 21KB - Virtual size: 24KB

.idata Size: 3KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 28KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 33KB - Virtual size: 36KB

.data
Size: 21KB - Virtual size: 24KB

.idata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 28KB