430edc171be7f3d7819dcc4b73069d9b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

430edc171be7f3d7819dcc4b73069d9b_JaffaCakes118
Size

303KB
MD5

430edc171be7f3d7819dcc4b73069d9b
SHA1

07d49dc26eaee3695fee37a7ce389697267dedee
SHA256

d2f00e4ab7d66b50e0ef3631d00bb2cc9483ab4749b51a6625d395f7ce613df7
SHA512

fcd4361e68dbb6681f1c8f4f07e9bef64f136e040d9fd3c4db7422310823411d30ce8b450d62181bb5c4b13417a8273c9dfd5534edd0d189ab87caad47825f03
SSDEEP

6144:qHEPHuzeDDCSyxI/ETz09wRi5KazOjfAgUGAZo6vG/NB4:PHuz4+qk5BwD8B4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
430edc171be7f3d7819dcc4b73069d9b_JaffaCakes118

Files

430edc171be7f3d7819dcc4b73069d9b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

839859e609f6eb5fdb7127f9e5622619

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

SHGetSettings
SHFormatDrive
SHFileOperationA

rpcrt4

RpcSmAllocate

ole32

CoTaskMemFree
CoTaskMemAlloc

version

VerQueryValueW

user32

CloseDesktop
CloseClipboard
GetMenuCheckMarkDimensions
CloseWindow
GetMonitorInfoA
GetSysColor
CloseWindowStation
GetDC
GetKeyboardLayout
CharNextA
GetKeyboardLayoutList
GetSystemMetrics
ReleaseDC
CharPrevA

kernel32

GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetProcessTimes
GetShortPathNameA
GetStringTypeExW
GetSystemDefaultLCID
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempPathW
GetTickCount
DeleteFileW
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSize
HeapUnlock
InitializeCriticalSection
FreeLibrary
InterlockedExchange
IsDBCSLeadByte
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
SetFileAttributesW
SetLastError
SetLocalTime
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
DeleteCriticalSection
CreateSemaphoreA
CreateMutexA
CreateFileW
CreateDirectoryW
CloseHandle
FormatMessageW
FindFirstFileW
FindClose
ExpandEnvironmentStringsW
InterlockedCompareExchange
EnterCriticalSection
GetTimeZoneInformation

advapi32

GetTraceLoggerHandle
AddAccessDeniedAce
GetTraceEnableLevel
GetTokenInformation
GetSecurityDescriptorDacl
GetLengthSid
FreeSid
CopySid
UnregisterTraceGuids
TraceEvent
SetSecurityDescriptorDacl
RegisterTraceGuidsA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
InitializeSecurityDescriptor
InitializeAcl
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidA
CheckTokenMembership
AllocateAndInitializeSid
AddAccessAllowedAce

shlwapi

StrChrA
PathFileExistsA
ChrCmpIA
StrCmpNA

gdi32

DeleteObject
DeleteDC
CreateSolidBrush
CreateDCA
GetDeviceCaps

dsound

ord9

Exports

Exports

ABProviderInit
DllMain
HrAddFavs
MSProviderInit
NDBGetFileInfo
NSTServiceEntry
OSTServiceEntry
OTONNotifyNewMail
PSTCrashRecovery
PSTServiceEntry
PSTServiceEntry_Unicode

Sections

.text
Size: 237KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

839859e609f6eb5fdb7127f9e5622619

Headers

File Characteristics

Imports

shell32

rpcrt4

ole32

version

user32

kernel32

advapi32

shlwapi

gdi32

dsound

Exports

Exports

Sections

.text Size: 237KB - Virtual size: 239KB

.rdata Size: 34KB - Virtual size: 36KB

.data Size: 17KB - Virtual size: 20KB

.idata Size: 5KB - Virtual size: 8KB

.rsrc Size: 6KB - Virtual size: 8KB

.text
Size: 237KB - Virtual size: 239KB

.rdata
Size: 34KB - Virtual size: 36KB

.data
Size: 17KB - Virtual size: 20KB

.idata
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 6KB - Virtual size: 8KB