40b777d5388885d1845d32c84a74eec1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

40b777d5388885d1845d32c84a74eec1_JaffaCakes118
Size

96KB
MD5

40b777d5388885d1845d32c84a74eec1
SHA1

39e06e226c6e0c131aa1477ffcdeee799f4043fa
SHA256

b6943ae695068246721971db88462ea47232e65fe04c8b0e553d578cbb5aee54
SHA512

18f58733887dbe94d4edda9f7b75fc6ce57086ff162e4c377de6f8f956df20a61d12d58759c22c80ae273e6bfe1352adcc6e9a4140c322fa3136dc4c334fcfb4
SSDEEP

1536:YVZM1xyC3AY0NRpd89xgOoDuqGOzdVBkva0KOK0w71Pvf2uw9:+ZMjnwY0axgOoDuqGAz4a0KOK0K1Pvfc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b777d5388885d1845d32c84a74eec1_JaffaCakes118

Files

40b777d5388885d1845d32c84a74eec1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9d86624a79c949462e51bbb6f0574667

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetLastError
LocalAlloc
GetCurrentProcess
GetWindowsDirectoryA
LCMapStringA
TerminateProcess
GetCurrentThreadId
SetEnvironmentVariableA
CompareStringW
HeapReAlloc
SetFilePointer
SetStdHandle
CompareStringA
GetTimeZoneInformation
FlushFileBuffers
GetLocaleInfoW
GetProcAddress
GetStringTypeW
LoadLibraryA
UnhandledExceptionFilter
GetVersionExA
GetStringTypeA
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidLocale
VirtualAlloc
IsValidCodePage
VirtualFree
HeapCreate
WriteFile
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
LocalFree
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
Sleep
GetEnvironmentStrings
HeapDestroy
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW

advapi32

RegSetValueExA
RegRestoreKeyA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
RegCreateKeyExA
AdjustTokenPrivileges

setupapi

SetupDiCreateDeviceInfoA
SetupDiClassGuidsFromNameA
SetupDiBuildDriverInfoList
SetupDiEnumDeviceInfo
SetupDiSetDeviceRegistryPropertyA
CM_Get_First_Log_Conf
SetupDiEnumDriverInfoA
SetupDiSetSelectedDriverA
CM_Get_Res_Des_Data_Size
CM_Get_Next_Res_Des
CM_Get_Next_Log_Conf
CM_Add_Empty_Log_Conf
CM_Get_Res_Des_Data
CM_Free_Res_Des_Handle
SetupGetIntField
CM_Add_Res_Des
CM_Free_Log_Conf_Handle
SetupFindFirstLineA
SetupFindNextLine
SetupGetStringFieldA
SetupDiOpenDevRegKey
SetupOpenInfFileA
SetupCloseInfFile
SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiSetDeviceInstallParamsA

Exports

Exports

DigiMultiPortCoInstaller

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d86624a79c949462e51bbb6f0574667

Headers

File Characteristics

Imports

kernel32

advapi32

setupapi

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 15KB - Virtual size: 20KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 15KB - Virtual size: 20KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 4KB - Virtual size: 3KB