6111f1c0fe548716c99559ab889bce8f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6111f1c0fe548716c99559ab889bce8f_JaffaCakes118
Size

808KB
MD5

6111f1c0fe548716c99559ab889bce8f
SHA1

74c024de02d3cdab7a125c2c7b043e2079401161
SHA256

984d8f7f059bb8abcae0c1fc74f0c70bc3d867aa0103980130d6e9b2ba3e8fa7
SHA512

c8159a72646dcb07fbf936574b70fbb488db24d54b90d51faac49e2137425b1aa9568da03763d843e1eecfdb34e0d2c77ab2a429d4c55cf23ed0f0479e8fb710
SSDEEP

12288:dH0OcnL/N31x7e7Z4hts3srjx2u89mr/wWXfguFAUly:l0OcnL/NA22u8MND

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6111f1c0fe548716c99559ab889bce8f_JaffaCakes118

Files

6111f1c0fe548716c99559ab889bce8f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

299223083ccd563a13360f4e3fcf2c9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetComputerNameA
GetACP
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
LoadLibraryExA
SystemTimeToFileTime
GetSystemTime
SetEvent
OpenProcess
ResumeThread
FindClose
FindNextFileA
FindFirstFileA
CreateEventA
DuplicateHandle
SetEndOfFile
CreateThread
lstrcpynA
GetVersionExA
LocalFree
GetCurrentDirectoryA
VirtualQuery
GetTimeZoneInformation
GetFullPathNameA
GetLocalTime
SetFileTime
GetSystemDirectoryA
GetFileTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
VirtualAlloc
VirtualFree
GetEnvironmentVariableA
HeapSize
HeapReAlloc
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
GetDriveTypeA
TlsFree
TlsAlloc
GetCommandLineA
MoveFileA
GetSystemTimeAsFileTime
RaiseException
ExitThread
TlsGetValue
TlsSetValue
RtlUnwind
ReadFile
GetFileSize
DeleteFileA
SetFilePointer
WriteFile
HeapCreate
HeapFree
HeapAlloc
OutputDebugStringA
GetTickCount
GetCurrentThreadId
IsBadStringPtrA
WideCharToMultiByte
IsBadReadPtr
IsBadWritePtr
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
GetShortPathNameA
lstrlenA
lstrlenW
GetCurrentProcess
FlushInstructionCache
GetCurrentProcessId
WaitForSingleObject
GetAtomNameA
ExitProcess
CreateFileMappingA
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleHandleA
GetDiskFreeSpaceA
VirtualProtect
FreeLibrary
Sleep
LoadLibraryA
GetProcAddress
GetVersion
CloseHandle
MultiByteToWideChar
SetLastError
InterlockedIncrement
InterlockedDecrement
GetProcessHeap
GetModuleFileNameA

user32

GetClassNameA
DefWindowProcA
TranslateMessage
GetWindowTextA
GetWindowLongA
EnumChildWindows
IsWindowVisible
FindWindowExA
LoadStringA
GetParent
SendMessageTimeoutA
RegisterWindowMessageA
GetWindowTextLengthA
SetFocus
DestroyWindow
UnregisterClassA
wsprintfA
KillTimer
SetTimer
IsWindow
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetMessageA
GetWindowRect
DispatchMessageA
PostThreadMessageA
IsZoomed
GetKeyState
GetKeyboardLayoutNameA
GetForegroundWindow
GetFocus
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetCursorPos
CallWindowProcA
RemovePropA
SetPropA
GetPropA
SetWindowLongA
GetWindow
IsWindowEnabled
SendMessageA
GetProcessWindowStation
OpenWindowStationA
SetProcessWindowStation
CloseWindowStation
PostMessageA
SetThreadDesktop
GetThreadDesktop
GetUserObjectInformationA
CloseDesktop
GetWindowThreadProcessId
EnumWindows

gdi32

TranslateCharsetInfo
GetStockObject

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetUserNameA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

ole32

CoUninitialize
CoInitialize
CoCreateInstance
StringFromCLSID
CreateStreamOnHGlobal
CoTaskMemFree

oleaut32

VariantClear
VariantChangeType
VariantCopy
SafeArrayUnaccessData
LoadRegTypeLi
SafeArrayGetLBound
SafeArrayAccessData
SysAllocStringLen
SysFreeString
SafeArrayGetUBound
GetErrorInfo
SysStringLen

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

mpr

WNetGetConnectionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
IAlloc

Sections

.text
Size: 656KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

299223083ccd563a13360f4e3fcf2c9d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

version

mpr

Exports

Exports

Sections

.text Size: 656KB - Virtual size: 655KB

.data Size: 112KB - Virtual size: 108KB

.shared Size: 4KB - Virtual size: 196B

.reloc Size: 32KB - Virtual size: 31KB

.text
Size: 656KB - Virtual size: 655KB

.data
Size: 112KB - Virtual size: 108KB

.shared
Size: 4KB - Virtual size: 196B

.reloc
Size: 32KB - Virtual size: 31KB