87c0457a7dcd35ca0f5e656283df79cf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

87c0457a7dcd35ca0f5e656283df79cf_JaffaCakes118
Size

45KB
MD5

87c0457a7dcd35ca0f5e656283df79cf
SHA1

489e00d2c9270a784074ee4e1b0a4ddcdb027e91
SHA256

59eef2c5c07dc86d89415225dcc52b979279e3e9508a9b4c675e718104c31f91
SHA512

098213658c32f904511dc8f194ef47f50613f15b5a8a95c05fc7a338fcff6f92a3a36f037aa4ed4ac4f396a321c1e0161be91a149ae7d2214e368fff98b78e02
SSDEEP

768:mU/KXKJB7SoGn401KqxvyyisifGcPBH3xft0ifq4iqqTqeitqjRd/3:fUKJZSoL0BByyCVPt3b0ipVqTqeikjT/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87c0457a7dcd35ca0f5e656283df79cf_JaffaCakes118

Files

87c0457a7dcd35ca0f5e656283df79cf_JaffaCakes118
.dll windows:5 windows x86 arch:x86

4f19c7b1955caa0c9c4891baef01c384

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentThreadId
ReadProcessMemory
InterlockedIncrement
GetFullPathNameW
SetThreadPriority
VirtualAlloc
DuplicateHandle
GetTickCount
WritePrivateProfileSectionW
lstrcpyW
LeaveCriticalSection
SetPriorityClass
CreateEventW
UnmapViewOfFile
CompareStringW
RaiseException
WriteFile
lstrcpynA
GetProcessHeap
TerminateProcess
CompareStringA
CreateSemaphoreA
CloseHandle
SetEvent
GetFileSize
RemoveDirectoryA
GetVersion
GetPrivateProfileStringW
GetStringTypeExA
CreateThread
HeapAlloc

ntdll

NtCreateWaitablePort
ZwFlushVirtualMemory
ZwDeleteValueKey
ZwDeleteKey
NtOpenEvent
ZwDebugActiveProcess
ZwGetDevicePowerState
NtCreateSymbolicLinkObject
ZwOpenEventPair

Exports

Exports

CreateProcessNotify
InternalSetTcpEntry
GetRTTAndHopCount
GetAdapterIndex
DllClientCleanup
Firerint
Icmp6SendEcho2
GetAdaptersInfo
DllClientStartup
GetIcmpStatistics
DeleteProxyArpEntry
Icmp6ParseReplies
SetTcpEntry
InternalSetIpForwardEntry
GetIpAddrTable
NTTimeToNTPTime
NTPTimeToNTFileTime
EnableRouter
InternalSetIpNetEntry
GetIpForwardTable
GetBestInterface
UnenableRouter
GetPerAdapterInfo
RestoreMediaSense
DeleteIPAddress
InternalGetIpForwardTable
GetAdaptersAddresses
NhGetInterfaceNameFromGuid
GetExtendedTcpTable
InternalGetUdpTable
GetTcpStatisticsEx
IpReleaseAddress
InternalDeleteIpForwardEntry
GetInterfaceInfo
GetAdapterOrderMap
GetIpErrorString
IcmpCloseHandle
GetNetworkParams
DisableMediaSense
InternalDeleteIpNetEntry
CreateIpForwardEntry
NhGetInterfaceNameFromDeviceGuid
GetIpStatistics
GetOwnerModuleFromTcp6Entry
SetAdapterIpAddress
AddIPAddress
NotifyRouteChange
GetIcmpStatisticsEx
GetOwnerModuleFromUdp6Entry
SetIfEntry
CancelIPChangeNotify
InternalSetIpStats
GetTcpTable
GetIfTable
GetTcpStatistics
GetUdpTable
GetIpNetTable
GetUdpStatisticsEx
GetExtendedUdpTable
register_icmp
GetUdpStatistics
NotifyAddrChange
IcmpSendEcho
AllocateAndGetIpAddrTableFromStack
GetBestInterfaceEx
GetNumberOfInterfaces
SetIpNetEntry
DeleteIpNetEntry
CreateProxyArpEntry
SetIpTTL
InternalGetIfTable
InternalGetIpNetTable
SendARP
InternalGetTcpTable
GetOwnerModuleFromUdpEntry
do_echo_rep
InternalCreateIpForwardEntry
GetIfEntry
CreateIpNetEntry
NhGetGuidFromInterfaceName
SetIpForwardEntry
IpRenewAddress

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f19c7b1955caa0c9c4891baef01c384

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 309B

.rsrc Size: 33KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 309B

.rsrc
Size: 33KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 4KB