6f1913e089262f21074525b54d96a721_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6f1913e089262f21074525b54d96a721_JaffaCakes118
Size

240KB
MD5

6f1913e089262f21074525b54d96a721
SHA1

236e70368b044d09c840f559dfe9865da7452fdd
SHA256

5411ec5177ac8209fc49651e2fe75456db6c082a7d33cb37b24cb8363cbcf56a
SHA512

d6dd013f920b15811850dd954df7ad20c6af9ea3e7e17c7854903e84b07791d87c691ada9d4b665271db30d32b6700d051b6a5aceffe139bc4110a81bc0a019b
SSDEEP

3072:939fbhV5lJ7lxIuIQ+diJVK90JbAdj6kCyBwOt1THEqZ9HpNw/lqbOVPqCbQ2gsU:9tbFltlxIuE6bGvnTHEqZdpNYqbOVg8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f1913e089262f21074525b54d96a721_JaffaCakes118

Files

6f1913e089262f21074525b54d96a721_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5ab9d00c8a138e46d45170c76333ecde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
LocalReAlloc
MapViewOfFile
GetTempPathA
UnmapViewOfFile
TlsSetValue
ReleaseMutex
GetCurrentProcessId
InterlockedCompareExchange
GetVersionExA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedExchange
lstrcpyW
lstrcatW
GetLocalTime
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
VirtualAlloc
GetCPInfo
FindCloseChangeNotification
Sleep
FreeLibraryAndExitThread
GetCurrentThreadId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemTime
SystemTimeToFileTime
lstrcpyA
lstrcmpA
CompareFileTime
SetEvent
WriteFile
GetTempFileNameA
CreateDirectoryW
MultiByteToWideChar
SetFileAttributesW
SetFileAttributesA
GetFileAttributesW
GetFileAttributesA
CreateFileA
LocalAlloc
LocalFree
lstrcmpW
lstrlenW
GetComputerNameExW
GetComputerNameW
GetCurrentThread
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
CreateEventW
GetTickCount
UnregisterWaitEx
RegisterWaitForSingleObject
CreateEventA
lstrlenA
GetProcAddress
CreateProcessA
FreeLibrary
GetWindowsDirectoryA
DeleteFileA
RemoveDirectoryA
LoadLibraryA
GetVersion
CreateDirectoryA
MoveFileA
GetPrivateProfileStringA
WaitForSingleObject
GetSystemInfo
CloseHandle
WideCharToMultiByte
GetPrivateProfileSectionA
GetCommandLineA
GetLocaleInfoA
GetOEMCP
GetACP
HeapAlloc
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
RtlUnwind
VirtualQuery
ExitProcess
GetModuleHandleA
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
QueryPerformanceCounter

user32

LoadBitmapA
GetKeyboardType
MessageBoxA
GetDlgItem
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItemTextA
SetFocus

advapi32

RegSetValueExA
CryptDeriveKey
CryptDecrypt
CryptGenRandom
LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityDescriptorOwner
GetSecurityDescriptorDacl
GetAce
CryptReleaseContext
OpenProcessToken
GetLengthSid
CopySid
GetSidSubAuthority
RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyA
RegQueryInfoKeyA
CryptVerifySignatureA
CryptSetKeyParam
CryptHashSessionKey
CryptGetUserKey
CryptDuplicateHash
OpenThreadToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
CryptGetKeyParam
CryptGenKey
CryptImportKey
CryptDestroyKey
CryptExportKey
RegisterEventSourceW
ReportEventW
RegNotifyChangeKeyValue
RegCreateKeyExW
RegQueryValueExW
CryptHashData
RevertToSelf
CryptCreateHash
AllocateLocallyUniqueId
CryptAcquireContextW
CryptAcquireContextA
CryptDestroyHash
CryptGetHashParam
RegDeleteValueA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA

ole32

CoCreateInstance
CoUninitialize
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoInitialize

Sections

.text
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ab9d00c8a138e46d45170c76333ecde

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 183KB - Virtual size: 182KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 4KB - Virtual size: 38KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 183KB - Virtual size: 182KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 4KB - Virtual size: 38KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 8KB