6ff85718d5de5a551bc70794119067e1_JaffaCakes118

General

Target

6ff85718d5de5a551bc70794119067e1_JaffaCakes118
Size

44KB
MD5

6ff85718d5de5a551bc70794119067e1
SHA1

30a719d0ec11a3d7102db3468b300bacef972d2e
SHA256

adaed61e28c23055d6717a975becb4b88e46f7ae57ccd718fab750e278f7da1b
SHA512

bb60af2ff84c59265b1007958336e19fdd7c6e46cc7727a562e8418447d27bfb6edcf6469d90ff8cf66fb7b6322823146ce0a56815de50c340fbf285e0717353
SSDEEP

768:GWMNiDmjMvOpkavubnx0fJmHn0r6tnTVWgLa1Hb:7CjMVxt0fQTBLaZb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff85718d5de5a551bc70794119067e1_JaffaCakes118

Files

6ff85718d5de5a551bc70794119067e1_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

339eb0bcbeac58800b214e24ea2c3635

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLocalTime
GetModuleFileNameA
InterlockedIncrement
VirtualAlloc
CreateMutexA
CreateThread
CloseHandle
WinExec
GetSystemDirectoryA
GetWindowsDirectoryA
GetLastError

user32

SetTimer
SetWindowsHookExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
UnhookWindowsHookEx
CallNextHookEx
CreateWindowExA
ShowWindow
RegisterClassExA
FindWindowExA
PostMessageA
KillTimer

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

msvcrt

free
__CxxFrameHandler
strrchr
div
isalnum
isalpha
_except_handler3
_stricmp
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv
fclose
fwrite
fopen
sprintf
strchr
??3@YAXPAX@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ZPyHaEkserhSw

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

339eb0bcbeac58800b214e24ea2c3635

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 936B

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 936B