8aa90787ae697e23b0d8ee69912c1339_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8aa90787ae697e23b0d8ee69912c1339_JaffaCakes118
Size

75KB
MD5

8aa90787ae697e23b0d8ee69912c1339
SHA1

6d190d2acab371ccab7bca335149be377c52b9ba
SHA256

15deca1d496bf70756ccf29fb03f318ad90cabf953146b75a3ad8b411cef0744
SHA512

0bc11d911b28dd5d44ae05fd5e484d0ad2f4f2263d586972c112707c0ea4228c980b63dbeb497fe449d8f8b2b9a1fc7b0b8b0198a7f41d773d74e7a1abc046f2
SSDEEP

768:c2Da4zNuMlr1mOqeKppZM2ZZsy3OfgXnXjL0K5nCzu0zJq:q4ZF1CpZrZ6y3UgXnXjp5C/zo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8aa90787ae697e23b0d8ee69912c1339_JaffaCakes118

Files

8aa90787ae697e23b0d8ee69912c1339_JaffaCakes118
.dll windows:6 windows x86 arch:x86

4d88cd55c68a0888a324dc2e02c90884

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

adsmsext.pdb

Imports

msvcrt

_initterm
_purecall
_except_handler4_common
_adjust_fdiv
wcscat_s
wcscpy_s
wcstok
wcschr
_wcsicmp
memset
_amsg_exit
_wcsnicmp
swprintf_s
_XcptFilter
malloc
free
memcpy
swscanf_s

activeds

ord17
ord15
ord18
ord7
ord9
ord16
ord14

adsldpc

ADsObject
LdapGetSyntaxOfAttributeOnServer
FreeObjectInfo
LdapCompareExt
ChangeSeparator
BuildADsPathFromLDAPPath
ReadServerSupportsIsADControl
ADSIPrint
LdapModifyS
BuildLDAPPathFromADsPath2
ReadServerSupportsIsADAMControl
LdapCrackUserDNtoNTLMUser2
GetDefaultServer
LdapReadAttributeFast
LdapValueFree
LdapCloseObject
LdapOpenObject

wldap32

ord12

netapi32

NetUserChangePassword
NetUserSetInfo

ole32

CoCreateInstance

winspool.drv

GetPrinterW
OpenPrinterW
SetPrinterW
ClosePrinter

advapi32

SystemFunction040
LogonUserW
RevertToSelf
ImpersonateLoggedOnUser
SystemFunction041

kernel32

GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalFree
LocalAlloc
GetSystemTime
GetLastError
CloseHandle
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
CompareStringW
InterlockedDecrement
InterlockedIncrement
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetProcAddress
LeaveCriticalSection
GetSystemDirectoryW
LoadLibraryW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
FormatMessageW
FileTimeToDosDateTime
DosDateTimeToFileTime
RaiseException
EnterCriticalSection

oleaut32

SafeArrayGetElement
VariantInit
SafeArrayGetLBound
VariantTimeToDosDateTime
SafeArrayGetUBound
SysFreeString
DosDateTimeToVariantTime
CreateErrorInfo
SysAllocString
SetErrorInfo
DispInvoke
LoadRegTypeLi
DispGetIDsOfNames
VariantCopy
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
VariantClear

secur32

LsaCallAuthenticationPackage
LsaLookupAuthenticationPackage
LsaConnectUntrusted
LsaDeregisterLogonProcess
LsaFreeReturnBuffer

ntdll

RtlInitString
RtlInitUnicodeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d88cd55c68a0888a324dc2e02c90884

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

activeds

adsldpc

wldap32

netapi32

ole32

winspool.drv

advapi32

kernel32

oleaut32

secur32

ntdll

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB