3746640e76c93124f996048f560ce78f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3746640e76c93124f996048f560ce78f_JaffaCakes118
Size

268KB
MD5

3746640e76c93124f996048f560ce78f
SHA1

ffe5d7fef39a913a22fb0669847f13b3ca5f0ef6
SHA256

1c55f9f588897a93825288b6d51bc5ef371b5f3b39e213453befc12a5a042052
SHA512

27f9f45cbc636d3e1f43f8bd4d55989f3b38f5a5cf41b93f3a3fc59f52748f7fec656d94f7a843aaf1db3844c8e79a759912248b16e836f94a79f6307b913da7
SSDEEP

6144:SrWkQMUOzXuaqndCJFgli4nfJkG6o4qiz0QzF4AfE/aZHFWjq3E:Sqkj57VSBi0RRt4qiz0sJEiajq3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3746640e76c93124f996048f560ce78f_JaffaCakes118

Files

3746640e76c93124f996048f560ce78f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b0168480e2c5228718f26929ca88cfac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA
ShowWindow
MessageBoxW
MessageBoxA
IsIconic
GetWindowThreadProcessId
GetWindowLongA
GetUserObjectInformationW
GetSystemMetrics
GetProcessWindowStation
GetDesktopWindow
EnumWindows
CloseWindow

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegSetKeySecurity
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
InitializeSecurityDescriptor
FreeSid
DeregisterEventSource

shlwapi

PathCombineA

ole32

CoCreateGuid

kernel32

SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
GetStringTypeW
Sleep
SetStdHandle
lstrcmpiA
CloseHandle
CompareFileTime
CompareStringA
CompareStringW
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FlushConsoleInputBuffer
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceW
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetOverlappedResult
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
SetLastError
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetUserDefaultLangID
GetVersion
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
OpenEventA
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleInputA
ReadFile
RemoveDirectoryA
ResetEvent
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetFilePointer
SetHandleCount
WriteFile

ws2_32

htonl
socket
WSAGetLastError
WSASetLastError
WSAStartup
closesocket
connect
gethostbyname
getservbyname
getsockopt
htons
ioctlsocket
ntohs
recv
select
send
setsockopt
shutdown

Exports

Exports

BindTexture2D
CreateImagePropBuffer
DVDMRWVRFinalizeDisc
EnumBaseImageDataPropertyRelease
EnumBaseImageDataPropertyReset
EnumFlashSettingNext
EnumItemRelease
EnumMCCustomSetNumberNext
EnumRelCamSettingDataReset
GetFunctions_i
GetImageItemProperty
GetNumHarddisks
GetRAWDevelopFaculties
ImportDataTrack
IsSupportParamValue
Malloc
MallocHost
MemcpyFromSymbol
Memset3D
SetDoubleForHost
WriteDevParamToRAW

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0168480e2c5228718f26929ca88cfac

Headers

File Characteristics

Imports

user32

advapi32

shlwapi

ole32

kernel32

ws2_32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.data Size: 96KB - Virtual size: 120KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 160KB

.data
Size: 96KB - Virtual size: 120KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB