6906dda0735549292b7308ae8fd616f3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6906dda0735549292b7308ae8fd616f3_JaffaCakes118
Size

45KB
MD5

6906dda0735549292b7308ae8fd616f3
SHA1

1b155cf872630d5a678eff439cea69ddbd994328
SHA256

4a7f9965eb80d40db6431a6a53ce80f78984998cca7887aab7f964747e900770
SHA512

b2a1457e67c427f6a1d55ba466b63978d3a288235db20ecfe7bc07bfa2d127a5e0d62562560644b6d3926d81fea14e76d3321a04be232230d1a5954ebee58b3e
SSDEEP

768:mI/KXKJB7SoGn401KqxvyyisifGcPBH3xft0ifq4iqqTqeitqjRd/3:XUKJZSoL0BByyCVPt3b0ipVqTqeikjT/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6906dda0735549292b7308ae8fd616f3_JaffaCakes118

Files

6906dda0735549292b7308ae8fd616f3_JaffaCakes118
.dll windows:5 windows x86 arch:x86

4f19c7b1955caa0c9c4891baef01c384

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentThreadId
ReadProcessMemory
InterlockedIncrement
GetFullPathNameW
SetThreadPriority
VirtualAlloc
DuplicateHandle
GetTickCount
WritePrivateProfileSectionW
lstrcpyW
LeaveCriticalSection
SetPriorityClass
CreateEventW
UnmapViewOfFile
CompareStringW
RaiseException
WriteFile
lstrcpynA
GetProcessHeap
TerminateProcess
CompareStringA
CreateSemaphoreA
CloseHandle
SetEvent
GetFileSize
RemoveDirectoryA
GetVersion
GetPrivateProfileStringW
GetStringTypeExA
CreateThread
HeapAlloc

ntdll

NtCreateWaitablePort
ZwFlushVirtualMemory
ZwDeleteValueKey
ZwDeleteKey
NtOpenEvent
ZwDebugActiveProcess
ZwGetDevicePowerState
NtCreateSymbolicLinkObject
ZwOpenEventPair

Exports

Exports

CreateProcessNotify
InternalSetTcpEntry
GetRTTAndHopCount
GetAdapterIndex
DllClientCleanup
coniethc
Icmp6SendEcho2
GetAdaptersInfo
DllClientStartup
GetIcmpStatistics
DeleteProxyArpEntry
Icmp6ParseReplies
SetTcpEntry
InternalSetIpForwardEntry
GetIpAddrTable
NTTimeToNTPTime
NTPTimeToNTFileTime
EnableRouter
InternalSetIpNetEntry
GetIpForwardTable
GetBestInterface
UnenableRouter
GetPerAdapterInfo
RestoreMediaSense
DeleteIPAddress
InternalGetIpForwardTable
GetAdaptersAddresses
NhGetInterfaceNameFromGuid
GetExtendedTcpTable
InternalGetUdpTable
GetTcpStatisticsEx
IpReleaseAddress
InternalDeleteIpForwardEntry
GetInterfaceInfo
GetAdapterOrderMap
GetIpErrorString
IcmpCloseHandle
GetNetworkParams
DisableMediaSense
InternalDeleteIpNetEntry
CreateIpForwardEntry
NhGetInterfaceNameFromDeviceGuid
GetIpStatistics
GetOwnerModuleFromTcp6Entry
SetAdapterIpAddress
AddIPAddress
NotifyRouteChange
GetIcmpStatisticsEx
GetOwnerModuleFromUdp6Entry
SetIfEntry
CancelIPChangeNotify
InternalSetIpStats
GetTcpTable
GetIfTable
GetTcpStatistics
GetUdpTable
GetIpNetTable
GetUdpStatisticsEx
GetExtendedUdpTable
register_icmp
GetUdpStatistics
NotifyAddrChange
IcmpSendEcho
AllocateAndGetIpAddrTableFromStack
GetBestInterfaceEx
GetNumberOfInterfaces
SetIpNetEntry
DeleteIpNetEntry
CreateProxyArpEntry
SetIpTTL
InternalGetIfTable
InternalGetIpNetTable
SendARP
InternalGetTcpTable
GetOwnerModuleFromUdpEntry
do_echo_rep
InternalCreateIpForwardEntry
GetIfEntry
CreateIpNetEntry
NhGetGuidFromInterfaceName
SetIpForwardEntry
IpRenewAddress

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f19c7b1955caa0c9c4891baef01c384

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 309B

.rsrc Size: 33KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 309B

.rsrc
Size: 33KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 4KB