5f445140980429ac6bdb04e2c2e388c1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5f445140980429ac6bdb04e2c2e388c1_JaffaCakes118
Size

52KB
MD5

5f445140980429ac6bdb04e2c2e388c1
SHA1

3ce40a30f5150936905c17d1262a255ed7f38746
SHA256

791e91bf1ed758d3cb4317c1fd58905cc5f930bdfb28b11cfe535ca5aaf609cc
SHA512

90191e3e4675b8b33a19e25c98214c6a48a0ce15435422c91bc57f1e929b6bd1ac7aa41ac0b7ff226ca99c2b7ee00cdf1c4361a88f347e05b8de39715acbeaec
SSDEEP

1536:50v2nYfU7Y06QRYvUyuzm8+KjSU4Mj9myqMZbaTjv:50eeL06a2Uy58tmAUlMlIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f445140980429ac6bdb04e2c2e388c1_JaffaCakes118

Files

5f445140980429ac6bdb04e2c2e388c1_JaffaCakes118
.dll windows:5 windows x86 arch:x86

cdee80286f8b3b5af1f22a713e9bc77e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndDeferWindowPos
TrackPopupMenu
ClientToScreen
GetMessageW
DestroyCursor
SetCapture
SetCursor
ValidateRect
DeferWindowPos
SetWindowLongA
EnumDisplaySettingsA
KillTimer
GetMonitorInfoA
MessageBoxA
RedrawWindow
GetWindow
AppendMenuW
CloseClipboard

ntdll

NtOpenMutant
NtGetWriteWatch
NtDeleteAtom
NtCreateTimer
ZwImpersonateThread

kernel32

QueryPerformanceCounter
InterlockedDecrement
GetSystemDirectoryW
LoadLibraryExW
CloseHandle
CreateProcessW
lstrcmpiW
GlobalAlloc
SetPriorityClass
GetCommandLineW
VirtualAlloc
GetCurrentThread
GlobalFree
SetThreadPriority
TryEnterCriticalSection
LocalAlloc
GetLongPathNameW
GetModuleHandleA
LoadResource
InterlockedCompareExchange

shlwapi

UrlIsW
UrlGetPartW
PathCanonicalizeW
PathRemoveBackslashW
PathIsUNCW

gdi32

GetObjectW
GetStockObject
SetTextAlign
IntersectClipRect
UpdateColors
CreateRectRgnIndirect

Exports

Exports

CreateIpForwardEntry
GetAdaptersInfo
NhGetGuidFromInterfaceName
InternalSetIpNetEntry
CreateProcessNotify
CreateProxyArpEntry
GetUdpStatistics
InternalDeleteIpNetEntry
GetAdapterIndex
CancelIPChangeNotify
GetExtendedUdpTable
DllClientCleanup
cmdksync
GetOwnerModuleFromTcpEntry
DllClientStartup
GetNetworkParams
GetIpAddrTable
DeleteProxyArpEntry
GetIpStatisticsEx
GetBestRoute
InternalCreateIpForwardEntry
GetPerAdapterInfo
FlushIpNetTable
UnenableRouter
DeleteIpNetEntry
InternalGetTcpTable
InternalSetTcpEntry
GetUniDirectionalAdapterInfo
GetIpErrorString
SetTcpEntry
GetFriendlyIfIndex
GetIpStatistics
NotifyRouteChange
SetAdapterIpAddress
GetTcpTable
EnableRouter
SetIpNetEntry
IcmpCloseHandle
GetBestInterface
CreateIpNetEntry
InternalGetIpAddrTable
InternalCreateIpNetEntry
IcmpCreateFile
GetIpNetTable
AllocateAndGetIpAddrTableFromStack

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdee80286f8b3b5af1f22a713e9bc77e

Headers

DLL Characteristics

File Characteristics

Imports

user32

ntdll

kernel32

shlwapi

gdi32

Exports

Exports

Sections

.text Size: 38KB - Virtual size: 38KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 38KB - Virtual size: 38KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB