4af9190d51327aae222416fd62a44c7c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4af9190d51327aae222416fd62a44c7c_JaffaCakes118
Size

157KB
MD5

4af9190d51327aae222416fd62a44c7c
SHA1

0c527cf2365fed60177f1b3d43c43e2bd6854608
SHA256

d677f883f67b004af0818e2d63f429c6bf94d2a675cb5346c8dee09031c1c60b
SHA512

24881ceecf3350cc0c696cd7097bc4bb5fa2b2c1c7a0ef5e99aa4f7ce5c326a2ba92eba8ab673b0d3b652a811bcc8381485ecbfa23c56b72bce587d3190fa833
SSDEEP

3072:E6vZH8j4JbA8HEkBOYQ7CaKFFr/olEMqqDLy/Un+Pe/4NKCnsy:E6vXGmpOYQRw1/eqqDLuUsOuKqs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4af9190d51327aae222416fd62a44c7c_JaffaCakes118

Files

4af9190d51327aae222416fd62a44c7c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

794a4f6f44db2d02e7579c556801b710

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
QueryDosDeviceW
GetSystemDirectoryW
Sleep
TlsGetValue
FormatMessageA
GetSystemInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetLogicalDriveStringsW
FindFirstVolumeW
FindNextVolumeW
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
SetEvent
CreateEventW
GetExitCodeThread
IsBadStringPtrW
CreateThread
IsBadReadPtr
CreateMutexW
ResetEvent
GetModuleHandleA
GetProcAddress
GetFileAttributesW
GetVersion
LoadLibraryW
GetModuleFileNameW
CreateFileW
FindVolumeClose
FreeLibrary
LocalFree
LocalAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCommandLineA
WaitForSingleObject
GetComputerNameW
ReleaseMutex
DeviceIoControl
CreateFileA
GetProcessHeap
ReleaseSemaphore
VirtualProtect
IsBadWritePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
RtlUnwind
GetVersionExA
InterlockedExchange
VirtualQuery
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
WriteFile
IsBadCodePtr
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LoadLibraryA
HeapSize
LCMapStringA
GetLocaleInfoA

advapi32

GetSecurityDescriptorLength
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
GetUserNameW
MakeSelfRelativeSD
GetSecurityDescriptorControl

ole32

CoGetInterfaceAndReleaseStream
CoCreateInstance
CoUnmarshalInterface

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

794a4f6f44db2d02e7579c556801b710

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 52KB - Virtual size: 93KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 52KB - Virtual size: 93KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB