3377517ec9bf232e4304070b22f66918_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3377517ec9bf232e4304070b22f66918_JaffaCakes118
Size

88KB
MD5

3377517ec9bf232e4304070b22f66918
SHA1

034cc275025f8f488210503fc0706ba2242a2be7
SHA256

a8a642c96bd485bce900e9548940391044e5a3825550c6db991141e30ea84df3
SHA512

5bdb02c44182a2d1002a99b4fd94dcd5b1eeec499d3fc956e628a813cf44632baa47999c1fa7570f34a6bb7cb9f81734e1988c2981d5abb0aff3a7fefa5620da
SSDEEP

1536:3V1w9m+dksHVByOz2wZjk4nICS4AsvCFOJdLa1H9YuUv:l2m5sHVoOz2wb0uvCFOJct9Yp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3377517ec9bf232e4304070b22f66918_JaffaCakes118

Files

3377517ec9bf232e4304070b22f66918_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

b981acc228c2bd2631202a11f826a01b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

KillTimer
DispatchMessageA
TranslateMessage
SetTimer
EnumChildWindows
CreateWindowExA
RegisterClassExA
CloseClipboard
DefWindowProcA
GetClassNameA
GetMessageA
GetWindowThreadProcessId
OpenClipboard
wsprintfA
EnumWindows
SystemParametersInfoA
SetWindowPos
ShowWindow

psapi

EnumProcessModules
EnumProcesses
GetModuleBaseNameA

winmm

timeGetTime

netapi32

Netbios

advapi32

RegQueryValueExW
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegOpenKeyExA
RegCloseKey
RegOpenKeyExW

shlwapi

StrStrIA
SHSetValueA
SHGetValueA

wininet

InternetOpenUrlA
HttpQueryInfoA
InternetOpenA
InternetReadFile
InternetSetOptionA
InternetCloseHandle

msvcrt

tmpnam
atoi
wctomb
__mb_cur_max
isalpha
islower
??0exception@@QAE@ABV0@@Z
wcscmp
wcslen
strerror
_CxxThrowException
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
??1exception@@UAE@XZ
isalnum
isupper
srand
tolower
printf
fopen
strchr
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
fwrite
fclose
strtok
isxdigit
toupper
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
free
strncpy
_stricmp
strstr
isspace

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CoCreateInstance

rpcrt4

UuidToStringA

oleaut32

VariantClear
SysFreeString
SysAllocString
GetErrorInfo

kernel32

lstrcpyA
GetFullPathNameA
InterlockedExchange
SetLastError
GetWindowsDirectoryA
GetCurrentProcessId
GetCurrentThread
LocalFree
DisableThreadLibraryCalls
GetVersion
GetModuleHandleA
GetVersionExA
lstrlenA
GetCurrentDirectoryA
GetProcAddress
WriteProcessMemory
FormatMessageA
QueryPerformanceCounter
VirtualAllocEx
OpenProcess
LoadLibraryA
SleepEx
GetThreadTimes
FreeEnvironmentStringsA
GetEnvironmentVariableA
MultiByteToWideChar
GetModuleFileNameA
GetLastError
Sleep
GetCurrentProcess
GetProcessTimes
GetLocalTime
GetSystemDirectoryA
DeleteFileA
CreateProcessA
GetTickCount
FreeLibrary
CloseHandle
GetEnvironmentStrings
HeapSize
HeapAlloc
QueryPerformanceFrequency
HeapFree
GetProcessHeap
lstrcmpiA
lstrcmpA
GetSystemInfo
CreateFileA
MoveFileExA
WaitForSingleObject
CreateRemoteThread

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b981acc228c2bd2631202a11f826a01b

Headers

File Characteristics

Imports

user32

psapi

winmm

netapi32

advapi32

shlwapi

wininet

msvcrt

version

ole32

rpcrt4

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 12KB - Virtual size: 15KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 12KB - Virtual size: 15KB

.reloc
Size: 4KB - Virtual size: 3KB