68b15e98751a0647adb1a08a1579c973_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
68b15e98751a0647adb1a08a1579c973_JaffaCakes118
Size 1.2MB
Sample240729-3zalkaxdmq
SHA256 20c057a6d694431197eb07e0682a0ad738bd07e07dae82f8f162b1ede313ebd9
MD5 68b15e98751a0647adb1a08a1579c973
SHA1 343a66845ef4747cd7bf2290660cbb120a913420
SHA512 5047a47b32ac59e73f6033645615edd784fbdc6afec4021b8878d1f847a07c6b11276c7976afe40a1a9c3369607ca5e6abf5153b934f10afb562af85cd1682f5
SSDEEP 24576:yuYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9N:a9cKrUqZWLAcU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68b15e98751a0647adb1a08a1579c973_JaffaCakes118

File Explorer

68b15e98751a0647adb1a08a1579c973_JaffaCakes118

.dll 1.2MB

68b15e98751a0647adb1a08a1579c973_JaffaCakes118

IMPHASH 1719e6eb79abbb745bd327c250f33bb3
SHA256 20c057a6d694431197eb07e0682a0ad738bd07e07dae82f8f162b1ede313ebd9
MD5 68b15e98751a0647adb1a08a1579c973
SHA1 343a66845ef4747cd7bf2290660cbb120a913420
SHA512 5047a47b32ac59e73f6033645615edd784fbdc6afec4021b8878d1f847a07c6b11276c7976afe40a1a9c3369607ca5e6abf5153b934f10afb562af85cd1682f5
SSDEEP 24576:yuYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9N:a9cKrUqZWLAcU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

933952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

GetTapi16CallbackMsg LAddrParamsInited LOpenDialAsst LocWizardDlgProc MMCAddProvider MMCConfigProvider MMCGetAvailableProviders MMCGetDeviceFlags MMCGetLineInfo MMCGetLineStatus MMCGetPhoneInfo MMCGetPhoneStatus MMCGetProviderList MMCGetServerConfig MMCInitialize MMCRemoveProvider MMCSetLineInfo MMCSetPhoneInfo MMCSetServerConfig MMCShutdown NonAsyncEventThread TAPIWndProc TUISPIDLLCallback internalConfig internalCreateDefLocation internalNewLocationW internalPerformance internalRemoveLocation internalRenameLocationW lineAccept lineAddProvider lineAddProviderA lineAddProviderW lineAddToConference lineAgentSpecific lineAnswer lineBlindTransfer lineBlindTransferA lineBlindTransferW lineClose lineCompleteCall lineCompleteTransfer lineConfigDialog lineConfigDialogA lineConfigDialogEdit lineConfigDialogEditA lineConfigDialogEditW lineConfigDialogW lineConfigProvider lineCreateAgentA lineCreateAgentSessionA lineCreateAgentSessionW lineCreateAgentW lineDeallocateCall lineDevSpecific lineDevSpecificFeature lineDial lineDialA lineDialW lineDrop lineForward lineForwardA lineForwardW lineGatherDigits lineGatherDigitsA lineGatherDigitsW lineGenerateDigits lineGenerateDigitsA lineGenerateDigitsW lineGenerateTone lineGetAddressCaps lineGetAddressCapsA lineGetAddressCapsW lineGetAddressID lineGetAddressIDA lineGetAddressIDW lineGetAddressStatus lineGetAddressStatusA lineGetAddressStatusW lineGetAgentActivityListA lineGetAgentActivityListW lineGetAgentCapsA lineGetAgentCapsW lineGetAgentGroupListA lineGetAgentGroupListW lineGetAgentInfo lineGetAgentSessionInfo lineGetAgentSessionList lineGetAgentStatusA lineGetAgentStatusW lineGetAppPriority lineGetAppPriorityA lineGetAppPriorityW lineGetCallInfo lineGetCallInfoA lineGetCallInfoW lineGetCallStatus lineGetConfRelatedCalls lineGetCountry lineGetCountryA lineGetCountryW lineGetDevCaps lineGetDevCapsA lineGetDevCapsW lineGetDevConfig lineGetDevConfigA lineGetDevConfigW lineGetGroupListA lineGetGroupListW lineGetID lineGetIDA lineGetIDW lineGetIcon lineGetIconA lineGetIconW lineGetLineDevStatus lineGetLineDevStatusA lineGetLineDevStatusW lineGetMessage lineGetNewCalls lineGetNumRings lineGetProviderList lineGetProviderListA lineGetProviderListW lineGetProxyStatus lineGetQueueInfo lineGetQueueListA lineGetQueueListW lineGetRequest lineGetRequestA lineGetRequestW lineGetStatusMessages lineGetTranslateCaps lineGetTranslateCapsA lineGetTranslateCapsW lineHandoff lineHandoffA lineHandoffW lineHold lineInitialize lineInitializeExA lineInitializeExW lineMakeCall lineMakeCallA lineMakeCallW lineMonitorDigits lineMonitorMedia lineMonitorTones lineNegotiateAPIVersion lineNegotiateExtVersion lineOpen lineOpenA lineOpenW linePark lineParkA lineParkW linePickup linePickupA linePickupW linePrepareAddToConference linePrepareAddToConferenceA linePrepareAddToConferenceW lineProxyMessage lineProxyResponse lineRedirect lineRedirectA lineRedirectW lineRegisterRequestRecipient lineReleaseUserUserInfo lineRemoveFromConference lineRemoveProvider lineSecureCall lineSendUserUserInfo lineSetAgentActivity lineSetAgentGroup lineSetAgentMeasurementPeriod lineSetAgentSessionState lineSetAgentState lineSetAgentStateEx lineSetAppPriority lineSetAppPriorityA lineSetAppPriorityW lineSetAppSpecific lineSetCallData lineSetCallParams lineSetCallPrivilege lineSetCallQualityOfService lineSetCallTreatment lineSetCurrentLocation lineSetDevConfig lineSetDevConfigA lineSetDevConfigW lineSetLineDevStatus lineSetMediaControl lineSetMediaMode lineSetNumRings lineSetQueueMeasurementPeriod lineSetStatusMessages lineSetTerminal lineSetTollList lineSetTollListA lineSetTollListW lineSetupConference lineSetupConferenceA lineSetupConferenceW lineSetupTransfer lineSetupTransferA lineSetupTransferW lineShutdown lineSwapHold lineTranslateAddress lineTranslateAddressA lineTranslateAddressW lineTranslateDialog lineTranslateDialogA lineTranslateDialogW lineUncompleteCall lineUnhold lineUnpark lineUnparkA lineUnparkW phoneClose phoneConfigDialog phoneConfigDialogA phoneConfigDialogW phoneDevSpecific phoneGetButtonInfo phoneGetButtonInfoA phoneGetButtonInfoW phoneGetData phoneGetDevCaps phoneGetDevCapsA phoneGetDevCapsW phoneGetDisplay phoneGetGain phoneGetHookSwitch phoneGetID phoneGetIDA phoneGetIDW phoneGetIcon phoneGetIconA phoneGetIconW phoneGetLamp phoneGetMessage phoneGetRing phoneGetStatus phoneGetStatusA phoneGetStatusMessages phoneGetStatusW phoneGetVolume phoneInitialize phoneInitializeExA phoneInitializeExW phoneNegotiateAPIVersion phoneNegotiateExtVersion phoneOpen phoneSetButtonInfo phoneSetButtonInfoA phoneSetButtonInfoW phoneSetData phoneSetDisplay phoneSetGain phoneSetHookSwitch phoneSetLamp phoneSetRing phoneSetStatusMessages phoneSetVolume phoneShutdown tapiGetLocationInfo tapiGetLocationInfoA tapiGetLocationInfoW tapiRequestDrop tapiRequestMakeCall tapiRequestMakeCallA tapiRequestMakeCallW tapiRequestMediaCall tapiRequestMediaCallA tapiRequestMediaCallW

Name

.text

Size

911KB

Virtual Size

910KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

206KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

68b15e98751a0647adb1a08a1579c973_JaffaCakes118

gdi32

advapi32

kernel32

user32

comdlg32

generic