66880e36e0c520c927f463cb3bf68387_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

66880e36e0c520c927f463cb3bf68387_JaffaCakes118
Size

63KB
MD5

66880e36e0c520c927f463cb3bf68387
SHA1

d9691a399a91ff945982467f232ceb781dce15f0
SHA256

40f030fe3b704ccb8e98db0a616a8e5ad222229a74764ce0894553ee8ce553f6
SHA512

f73e3d5027db8d81ec1714da38c54d254f939eaff208ea4399227cad1b4fd71ec5de3131400f11235da49563bc42e77520d5dc357dfde57f0af62bcca8d1c0bf
SSDEEP

1536:yWlwvTiwSKz+1IM5TtZ91sW/N62My13LXuARttDmMFwcPjmGEOf:ySQTbz+aUTtZwL2l/RXDVVjz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66880e36e0c520c927f463cb3bf68387_JaffaCakes118

Files

66880e36e0c520c927f463cb3bf68387_JaffaCakes118
.dll windows:5 windows x86 arch:x86

71ec43f20974bb1713ab8756034e0d23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
IsDBCSLeadByteEx
UnmapViewOfFile
IsDBCSLeadByte
RtlUnwind
EnterCriticalSection
CloseHandle
CreateFileA
CreateThread
GetLocalTime
GlobalAlloc
LoadLibraryW
WideCharToMultiByte
ResetEvent
GetModuleHandleA
UnhandledExceptionFilter
GetVersionExA
LocalFree
lstrlenW
CreateFileMappingW
VirtualQueryEx
lstrcmpA
HeapReAlloc
SetFilePointer
TerminateProcess
IsBadCodePtr
GetACP
GetOEMCP
OutputDebugStringA
MapViewOfFile
WaitForMultipleObjects
HeapFree
GetTimeFormatA
GlobalAddAtomW
GetComputerNameW
GetLocaleInfoA

gdi32

SetWindowOrgEx
SetTextColor
EndPage
SelectClipRgn
Ellipse
CreateDIBitmap
MoveToEx
Rectangle
EnumFontFamiliesExA
GetNearestColor
GetViewportOrgEx
GetClipBox
ExtSelectClipRgn
GetEnhMetaFileHeader
CreatePatternBrush
GetTextMetricsA
SetTextAlign
SetBkMode
GetStockObject
SetMapMode
OffsetViewportOrgEx
FillRgn
GdiSetBatchLimit

iser32

CheckDlgButton
DefWindowProcA
InvalidateRgn
ScrollWindowEx
IsChild
RegisterClipboardFormatA
AttachThreadInput
SendMessageA
CreateMDIWindowW
GetScrollPos
SetScrollRange
DispatchMessageW
MessageBoxA
RegisterClassExW
BringWindowToTop
SetWindowPlacement
GetSysColorBrush
DefFrameProcW
SetRect
EqualRect
GetActiveWindow
GetClassNameA
DefWindowProcW
ScrollDC
CreateWindowExW
KillTimer
GetClassInfoExA
RedrawWindow
DrawIcon
SetClipboardViewer
UnionRect
ReleaseDC
GetWindowRect
SetMenu
GetWindowPlacement
GetKeyboardLayout
MoveWindow
CreateIcon
ChangeClipboardChain
SetWindowLongA
SetClassLongA
ShowCursor

dplaprop

_Mbrtowc
_LDtest
_FRteps
_Wcrtomb
_Eps
_Dnorm
_LCosh
_Nan

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA

ole32

CoRegisterMessageFilter
ReadFmtUserTypeStg
CLSIDFromProgID
GetRunningObjectTable
GetHGlobalFromStream
CreateFileMoniker
StringFromCLSID
OleCreateLinkToFile
OleLoad
CreateDataAdviseHolder
CreateItemMoniker
DoDragDrop

Exports

Exports

BuildADsPathFromParent
CreateProcessNotify
DllClientCleanup
forcavaw
FreeObjectInfo
FreeADsStr
BuildADsPathFromLDAPPath
DllClientStartup
ApphelpUpdateCacheEntry
ConvertSidToU2Trustee
GetPermLayers
ConvertSidToString
BerBvFree
ChangeSeparator
FreeADsMem
GetLDAPTypeName
AllocADsStr
BuildADsParentPathFromObjectInfo
GetDomainDNSNameForDomain
Component
AdsTypeToLdapTypeCopyTime
ConvertU2TrusteeToSid
GetDisplayName

Sections

.text
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71ec43f20974bb1713ab8756034e0d23

Headers

File Characteristics

Imports

kernel32

gdi32

iser32

dplaprop

advapi32

ole32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 57KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB