3c9c2df016cab72625723d2580d07641_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3c9c2df016cab72625723d2580d07641_JaffaCakes118
Size

260KB
MD5

3c9c2df016cab72625723d2580d07641
SHA1

f3c642622977f73f4a2e69d6bbc82278eef8a02b
SHA256

46c50c1ad0bf0fbbc7f5d188299c1f93fcac0e63ead0ec6e7c12aa8c150c5134
SHA512

8643b4991e521f2c4ef8cb54d0442bfb98c311bb9efd7fe22db69e2162c988369185557058a45dca30f1ad35187fa05b00387bb28b6b5ee7d6e7f7f591a18564
SSDEEP

6144:JLOKbn/V5rYLCZ+E+joOOp0g0JIs5xZuGzGskXAy:Vbn/TUTr81p0/TsL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c9c2df016cab72625723d2580d07641_JaffaCakes118

Files

3c9c2df016cab72625723d2580d07641_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4111007eda028b370214aab150b42720

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

ws2_32

send
recv
ioctlsocket
socket
htons
gethostbyname
gethostbyaddr
connect
closesocket
WSAStartup
WSAGetLastError
inet_addr

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

kernel32

WideCharToMultiByte
WaitForMultipleObjects
VirtualFree
UnmapViewOfFile
UnhandledExceptionFilter
WriteConsoleA
TlsGetValue
TlsFree
TlsAlloc
TerminateThread
TerminateProcess
WriteConsoleW
WriteFile
TlsSetValue
GetSystemDirectoryA
Sleep
SetUnhandledExceptionFilter
SetThreadPriority
SetStdHandle
SetLastError
CloseHandle
CreateEventA
CreateFileA
CreateFileMappingA
CreateSemaphoreA
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExitProcess
ExitThread
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapSize
HeapValidate
HeapWalk
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
OpenProcess
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
RtlUnwind
SetEndOfFile
SetEvent
SetFilePointer
SetHandleCount

Exports

Exports

AddDataToImageItem
BindTexture2D
CopyClickWBCoefs
CreateFolder
EnumDeviceReset
EnumRelCamSettingReset
GetAFDistanceSettingCount
GetDevice
GetDiscErasingTime
GetExposureComp
MallocPitch
RegisterFatBinary
UnbindTexture
WGLGetDevice

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4111007eda028b370214aab150b42720

Headers

File Characteristics

Imports

user32

ws2_32

advapi32

setupapi

kernel32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 164KB

.data Size: 84KB - Virtual size: 116KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 164KB - Virtual size: 164KB

.data
Size: 84KB - Virtual size: 116KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB