6889eff32b36c63a25172144516bebbd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6889eff32b36c63a25172144516bebbd_JaffaCakes118
Size

187KB
MD5

6889eff32b36c63a25172144516bebbd
SHA1

dfcc2fb7c03f883a8aa947254ade4bd31d0aa906
SHA256

b606850065e783af5b1ed52683d8e8e8e53583e3e0c9c8ee9b4288a3938724a4
SHA512

279d4deb9b956192f7a4c54340aeeacd04db7a608292b29edc089597a75b5e36079a14dd5e9e8db97eb1d24d1310c316a099ca2b66bc2dde0ea220469bccec33
SSDEEP

3072:khKsmFe7l0AbgFSBXoczloKrYMDFf0UhvxVaW1jcslYzzulV:khKc7l03FSuwloKj0+xVONzzE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6889eff32b36c63a25172144516bebbd_JaffaCakes118

Files

6889eff32b36c63a25172144516bebbd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

77eaa2dbe5af1fb50e353960c9dca560

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindNextFileA
DeleteFileA
FindFirstFileA
GetTempFileNameA
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
UnmapViewOfFile
GetLastError
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpA
SetLastError
GetEnvironmentVariableA
SetFileAttributesA
lstrcatA
OpenEventA
WriteFile
CopyFileA
Sleep
GetVolumeInformationA
GetDriveTypeA
ExitProcess
SetFilePointer
ReadFile
GetModuleHandleA
GetModuleFileNameA
CreateProcessA
GetSystemTime
GetSystemDirectoryA
SetFileTime
GetLocalTime
GetPrivateProfileStringA
FindClose
GetWindowsDirectoryW
GetEnvironmentVariableW
GetComputerNameW
GetTimeZoneInformation
MultiByteToWideChar
lstrcatW
lstrlenW
GetVersionExA
GetComputerNameA
lstrcpyA
GetTickCount
FileTimeToSystemTime
GetWindowsDirectoryA
TerminateProcess
WaitForSingleObject
CreateDirectoryA
CreateMutexA
ReleaseMutex
OutputDebugStringA
GetFileTime
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
CreateFileA
lstrlenA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileAttributesA
GetTempPathW
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
HeapAlloc
HeapFree
GetFileType
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsFree
SetStdHandle
SetEndOfFile
SetHandleCount
GetStdHandle
GetStartupInfoA
FlushFileBuffers
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
LCMapStringA
LCMapStringW

user32

DefWindowProcA
wsprintfA
RegisterClassExA
CreateWindowExA
SendMessageA
CharLowerBuffA
wsprintfW
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegEnumValueA
RegDeleteValueA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

ws2_32

inet_ntoa
gethostbyname
WSAStartup
WSACleanup

Exports

Exports

AddAtomS
AddAtomT
Entry

Sections

.text
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77eaa2dbe5af1fb50e353960c9dca560

Headers

File Characteristics

Imports

kernel32

user32

advapi32

rpcrt4

ws2_32

Exports

Exports

Sections

.text Size: 147KB - Virtual size: 147KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 18KB - Virtual size: 27KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 147KB - Virtual size: 147KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 18KB - Virtual size: 27KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 10KB - Virtual size: 10KB