8c7626905665bbf811852720416c62d3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8c7626905665bbf811852720416c62d3_JaffaCakes118
Size

35KB
MD5

8c7626905665bbf811852720416c62d3
SHA1

b859bbc3fc3ad278d72cde5272a4b90b43cddc27
SHA256

e6fed948f765d3d809b51fdacfd0d5a7d367446f7b4c04449ecf11562fd5cf31
SHA512

9e324a535e9184801c69159d5c6941dc84751961881c2267bcc95867d5e201edbed108509f9919d8d08b104dfd6dedabafab8c7017b64aad29551cfa70281879
SSDEEP

768:/lQ8wbX7WLWfmqNLsku7IfrjzdRRS8azkfy/owttpItZYCo:FaCWfmq1CsfTaJsZY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c7626905665bbf811852720416c62d3_JaffaCakes118

Files

8c7626905665bbf811852720416c62d3_JaffaCakes118
.dll windows:1 windows x86 arch:x86

a520c1a13b86b9e370da86317ca5e4b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BackupRead
DefineDosDeviceW
EnumCalendarInfoW
ExitProcess
FindClose
GetCommMask
GetCommState
GetCompressedFileSizeA
GetConsoleAliasExesA
GetConsoleAliasesA
GetConsoleAliasesW
GetDefaultCommConfigA
GetFileSize
GetFileType
GetNumberFormatW
GetNumberOfConsoleMouseButtons
GetStringTypeExA
GetStringTypeExW
GlobalUnfix
Heap32First
InterlockedExchangeAdd
OpenMutexA
PeekNamedPipe
SetConsoleCP
SetCurrentDirectoryW
SetFileApisToANSI
SetNamedPipeHandleState
SetThreadAffinityMask
ShowConsoleCursor
Sleep
TlsAlloc
TransmitCommChar
VirtualProtect
WriteConsoleW
WriteFileEx
_lclose
_lopen
lstrcmpA
lstrcmpiA

user32

AttachThreadInput
BlockInput
CheckMenuItem
CloseDesktop
CreateCaret
CreateDialogParamW
DdeDisconnect
DdeUninitialize
DispatchMessageW
EndDeferWindowPos
EnumDesktopsA
EnumWindows
GetClassInfoExW
GetClassWord
GetDlgItem
GetMenuState
GetParent
GetPropA
GetTitleBarInfo
GetUserObjectInformationA
LoadAcceleratorsW
LoadCursorFromFileW
OffsetRect
PeekMessageW
PtInRect
RegisterWindowMessageA
SetFocus
SetMenuItemInfoW
SetUserObjectInformationW
ValidateRect
WindowFromPoint

gdi32

CreateFontW
DeleteEnhMetaFile
EnumFontFamiliesA
GdiComment
GetCharWidthFloatW
GetClipBox
GetClipRgn
GetColorSpace
GetCurrentObject
GetCurrentPositionEx
GetDCOrgEx
GetDeviceGammaRamp
GetLogColorSpaceW
GetPath
GetPixel
GetPixelFormat
GetTextFaceA
GetTextFaceW
PolyBezierTo
SelectObject
SetTextJustification

comdlg32

ChooseFontW

comctl32

ImageList_DragLeave

shell32

SHBrowseForFolderA
SHFileOperationW

advapi32

AccessCheck
AddAce
BuildSecurityDescriptorW
BuildTrusteeWithNameA
CryptGenKey
ElfNumberOfRecords
ElfOldestRecord
ElfReportEventW
EncryptFileW
GetCurrentHwProfileA
GetExplicitEntriesFromAclW
GetLengthSid
GetSecurityInfoExW
GetServiceKeyNameW
LsaQueryInfoTrustedDomain
RegCreateKeyW
RegLoadKeyA
RegQueryMultipleValuesW
SetServiceStatus

msvcrt

_callnewh
_chdrive
_execvp
_heapused
_outpd
_spawnvp
_strncoll
_unlock
_wenviron
_wexecle
_wexecv
_wexecvp
fopen
iswalnum
iswctype
perror
realloc
rename
strncpy
tan
towupper
ungetwc

Exports

Exports

AuIGxlp
AyBxcgPhGgCUOEd
Erhnwb
LwesimJvqycI
PuyHbAuCEQGfaai
QihpwwaANLeUjwwzg
QkjOfliofg
SnhicxHNzXm
TVfEpLeBwutDxlf
TopTOXNoehdsfhk
UjFrftmwu

Sections

.text
Size: 7KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a520c1a13b86b9e370da86317ca5e4b7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

comctl32

shell32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 83KB

.data Size: 23KB - Virtual size: 31KB

.xdata Size: 512B - Virtual size: 309B

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 83KB

.data
Size: 23KB - Virtual size: 31KB

.xdata
Size: 512B - Virtual size: 309B

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 1KB - Virtual size: 1KB