3fe173cfc004fef38d2fa2771d9d2bfd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3fe173cfc004fef38d2fa2771d9d2bfd_JaffaCakes118
Size

348KB
MD5

3fe173cfc004fef38d2fa2771d9d2bfd
SHA1

984cde3a91a0a148ccd8163711952e8b94f2e90f
SHA256

01f1dd519b7f9cd0c611ca2e3005be336051df914c218c240869f4640d73286c
SHA512

62f20f55e56f4166bd6138cbc352f4b164fbc538fb437d1907f9690607e1223ea090dfa6a74b7e28f60677b12ec399cc8a036a682b7ef1d68e3d11f628bc2cfe
SSDEEP

6144:NM1webhOIm2aZ/pB3fUQWTAHsf3v1D22slKrc215dixOyK2wmz5O/W1Vh:um2CbWTkK3hXYKrB5kK2wmzs/W1Vh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fe173cfc004fef38d2fa2771d9d2bfd_JaffaCakes118

Files

3fe173cfc004fef38d2fa2771d9d2bfd_JaffaCakes118
.dll windows:5 windows x86 arch:x86

dd7e79e96c712393c22e82553f8227b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

inet_ntoa

wininet

InternetOpenW

shlwapi

StrCmpIW

imm32

ImmGetCompositionStringW

winmm

mixerSetControlDetails

psapi

GetModuleFileNameExW

userenv

CreateEnvironmentBlock

kernel32

GetModuleHandleA
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyNameTextW

gdi32

BitBlt

advapi32

CreateServiceW

shell32

SHChangeNotify

ole32

CoInitialize

oleaut32

SysFreeString

Exports

Exports

Install
Launch
ServiceMain
UnInstall

Sections

.text
Size: - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.work0
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.work1
Size: - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.work2
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd7e79e96c712393c22e82553f8227b8

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

wininet

shlwapi

imm32

winmm

psapi

userenv

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: - Virtual size: 459KB

.rodata Size: - Virtual size: 10KB

.rdata Size: - Virtual size: 89KB

.data Size: - Virtual size: 510KB

.rsrc Size: 1024B - Virtual size: 976B

.work0 Size: - Virtual size: 22KB

.work1 Size: - Virtual size: 63KB

.work2 Size: 346KB - Virtual size: 345KB

.reloc Size: 512B - Virtual size: 136B

.text
Size: - Virtual size: 459KB

.rodata
Size: - Virtual size: 10KB

.rdata
Size: - Virtual size: 89KB

.data
Size: - Virtual size: 510KB

.rsrc
Size: 1024B - Virtual size: 976B

.work0
Size: - Virtual size: 22KB

.work1
Size: - Virtual size: 63KB

.work2
Size: 346KB - Virtual size: 345KB

.reloc
Size: 512B - Virtual size: 136B