87ef49819306b6e90c75244ed7d0744f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

87ef49819306b6e90c75244ed7d0744f_JaffaCakes118
Size

154KB
MD5

87ef49819306b6e90c75244ed7d0744f
SHA1

76a4e4762dea4356b67852911a4460b97cbf5bb2
SHA256

c506d5b5d08001d3901f046381273747138147aa76e4d85e192cdf5152041e63
SHA512

825fb83be6cc1b56357ae8c9c95f1b03b6b7fcd8ee6c0075bb5e643c751bd0cb3b6c30985004988058a4e2770ea64119a68f22c884ec598228f458237fd88379
SSDEEP

3072:4aYhtZneLc7Qf4fALX0kVQ9Cq1r7gUyjyZye0mwg6r1mtFiVCPg6Vc:4awZneNr9jq1YiyVvgmuV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87ef49819306b6e90c75244ed7d0744f_JaffaCakes118

Files

87ef49819306b6e90c75244ed7d0744f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5bf9bff6a96ac598c022a769431afd0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadDirectoryChangesW
WaitForDebugEvent
SetFileApisToOEM
DisableThreadLibraryCalls
IsDBCSLeadByteEx
Heap32First
GetProcAddress
LoadLibraryA
GetTickCount
GetHandleInformation
VerifyVersionInfoW
WriteConsoleInputA
GetLogicalDriveStringsA
Sleep
GetOEMCP

user32

CallWindowProcW
CloseWindow
DrawFrameControl
CheckMenuRadioItem
ChangeDisplaySettingsExA
SetMenuItemInfoA
SetClassLongA
EnableScrollBar
PostThreadMessageW
ToAscii
GetDlgItemTextW
GetMenuCheckMarkDimensions
SetWindowPlacement
GetScrollRange

gdi32

SetBitmapBits
FillPath
SetBitmapDimensionEx
GetTextAlign
CreateBitmap
CreateScalableFontResourceA
GetBitmapBits

advapi32

OpenEncryptedFileRawA
RegSaveKeyA
OpenBackupEventLogW
GetPrivateObjectSecurity
SetTokenInformation
AddAuditAccessAce
IsTokenUntrusted

Exports

Exports

SfAykii
SfBepc
SfBntlov
SfCfa
SfCozrh
SfCynob
SfDli
SfDpsf
SfEljz
SfEwa
SfFplfvm
SfGfp
SfGkp
SfHmsed
SfIl
SfJev
SfJewv
SfJljc
SfJorv
SfJvdhw
SfKawx
SfKevlu
SfKx
SfLaeopi
SfLerk
SfLgxq
SfLikjy
SfLsi
SfMwzaw
SfNljs
SfNods
SfNter
SfNvsfvd
SfOf
SfOyyzth
SfPdupyz
SfPg
SfPqalxm
SfQfdcq
SfQtqy
SfRo
SfSjzo
SfSqb
SfTcbs
SfTfnqbh
SfTqo
SfTybrz
SfUid
SfUxsug
SfVsw
SfVswpje
SfWfviu
SfWo
SfXa
SfYmebv
SfZa
SfZay

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 471KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5bf9bff6a96ac598c022a769431afd0e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 123KB - Virtual size: 122KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 2KB - Virtual size: 471KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 123KB - Virtual size: 122KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 2KB - Virtual size: 471KB

.reloc
Size: 14KB - Virtual size: 13KB