8b0ca6078fbffd99c49e1af8eb49ce29_JaffaCakes118

General

Target

8b0ca6078fbffd99c49e1af8eb49ce29_JaffaCakes118
Size

44KB
MD5

8b0ca6078fbffd99c49e1af8eb49ce29
SHA1

48c9948dfa6b68e92282f8d60c9dae709e594c0b
SHA256

62538b8b9cfb9e860938bce4be766faec6d07eab23038b6bfcc70af7c1ebe989
SHA512

d67192b03970d45f61da8e7d89e5aa27328d4b681bf72983c89888d1a8b79050d9c1e37a8e650b8d591a125d1c602f3fd128b186ade7cf97fbbc6fdf861905ae
SSDEEP

768:uReXdHNYiezCx6BuZFeylpkavMK/zEhVzgLa1wwx:bXxuiezCx6B4eyMcIQLaH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b0ca6078fbffd99c49e1af8eb49ce29_JaffaCakes118

Files

8b0ca6078fbffd99c49e1af8eb49ce29_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

74789cdd81d132e6b1f7c584c6737683

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
GetProcAddress
LoadLibraryA
CreateProcessA
GetModuleFileNameA
CreateThread
InterlockedIncrement
CreateMutexA
WinExec
GetWindowsDirectoryA
CloseHandle
GetLastError
GetLocalTime
GetSystemDirectoryA

user32

PostMessageA
FindWindowExA
UnhookWindowsHookEx
RegisterClassExA
SetWindowsHookExA
DispatchMessageA
CreateWindowExA
ShowWindow
KillTimer
SetTimer
DefWindowProcA
CallNextHookEx
GetMessageA
TranslateMessage

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

shlwapi

SHGetValueA

msvcrt

sprintf
_adjust_fdiv
malloc
_initterm
free
strchr
fopen
fwrite
fclose
strrchr
__CxxFrameHandler
_stricmp
_except_handler3
??2@YAPAXI@Z
_pctype
??3@YAXPAX@Z

wininet

HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74789cdd81d132e6b1f7c584c6737683

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

wininet

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 886B

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 886B