38030fb9653e7b394c5842785de8bdac_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

38030fb9653e7b394c5842785de8bdac_JaffaCakes118
Size

95KB
MD5

38030fb9653e7b394c5842785de8bdac
SHA1

f504d7d64d9b624621ce2f620a84a534a2a95bbc
SHA256

041ec450b0efcbe2e65f5c3b724d4d64d33e9743fb748e43821e4728b97f3ed8
SHA512

9e60f5ef57f79238d4637c0df9b9f23137e368d315d66aaaa67a9a94a73b2ab066cab4a60fac6ff6211499c79825ee0ed3bd13c6202fde158e99028d90a92b01
SSDEEP

1536:bKCPNdMUSNa7stgqYeJyqWmJkKtxlGfYizIynNQGkHe3jEn0NJNLh:rOUNwtgq/QKtxlEYKhN3kH0jE0NJNLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38030fb9653e7b394c5842785de8bdac_JaffaCakes118

Files

38030fb9653e7b394c5842785de8bdac_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a8fa47b2f943f601c8bacdc0597e3764

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetModuleHandleA
GetCurrentDirectoryW
GetSystemDirectoryW
GetModuleFileNameW
LoadLibraryW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
GetTickCount
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
VirtualQuery
InterlockedExchange
GetVersionExA
RtlUnwind
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetSystemInfo
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
GetProcAddress
LocalAlloc
lstrlenW
lstrcmpW
lstrcmpiW
CompareStringW
GetModuleHandleW
lstrcpynW
ExpandEnvironmentStringsW
GetCommandLineA
VirtualProtect

user32

KillTimer
SetTimer
ShowWindow
SetWindowLongW
GetDlgItem
GetParent
DestroyIcon
GetSysColorBrush
SendDlgItemMessageW
SendMessageW
WinHelpW
GetWindowLongW
LoadStringW
LoadIconW
GetSystemMetrics
CopyRect
GetWindowRect
CheckDlgButton
EndDialog
EnableWindow
SetDoubleClickTime
SwapMouseButton
MapWindowPoints
PtInRect
GetDC
SetDlgItemInt
DestroyCursor
InvalidateRect
GetSysColor
LoadImageW
LoadCursorW
IsDlgButtonChecked
ReleaseDC
ShowCursor
SetCursor
DrawFocusRect
CheckRadioButton
GetDlgItemInt
RegisterWindowMessageW
DialogBoxParamW
MessageBeep
CharNextW
MessageBoxW
GetFocus
DrawIcon
InflateRect
SystemParametersInfoW

advapi32

RegEnumValueW
RegQueryValueW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW

gdi32

SelectObject
GetDeviceCaps
SetLayout
GetLayout
ExtTextOutW
SetBkColor
SetTextColor
GetTextMetricsW
DeleteDC
DeleteObject

rpcrt4

I_RpcMapWin32Status
RpcServerRegisterIf2
RpcServerUseProtseqEpW

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8fa47b2f943f601c8bacdc0597e3764

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

rpcrt4

Sections

.text Size: 40KB - Virtual size: 40KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 36KB - Virtual size: 70KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 40KB - Virtual size: 40KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 36KB - Virtual size: 70KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 3KB - Virtual size: 3KB