8cfdb35d9d8d50f1c3371b93b0573541_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8cfdb35d9d8d50f1c3371b93b0573541_JaffaCakes118
Size

82KB
MD5

8cfdb35d9d8d50f1c3371b93b0573541
SHA1

0522e0d6cbf564db45bc3e3588bf59f2d4629997
SHA256

8ce0dc5c2e695c3976351898908635e192180dc60420edf868cf2af1d97e0b13
SHA512

573cb028f1f74c5235234ad575a4a81f92fa9fc9c12f5916041d3d647d6d80ceebe0af9e8f532c43b0c40fee5ceebf0b5e64e75ff33c4386b343b1d71d8a864d
SSDEEP

1536:IjDSybvSBUoZA6bFNkbm+hIVaPtnhS2V3gGEH5kHMuMEX7NYX3koOaU13uH:IW9A66bPthS2VgrZkHFGXUomA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cfdb35d9d8d50f1c3371b93b0573541_JaffaCakes118

Files

8cfdb35d9d8d50f1c3371b93b0573541_JaffaCakes118
.exe windows:5 windows x86 arch:x86

12b43b9211b315d1d472fb44d8aa24a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetSystemTimeAsFileTime
GetThreadTimes
SetMailslotInfo
SetComputerNameExW
GetFileAttributesExA
EnumSystemLocalesW
MultiByteToWideChar
LZCloseFile
GetModuleHandleW
GetCurrentProcessId
HeapCreate
GetNumberOfConsoleInputEvents
QueryPerformanceCounter
LoadLibraryA
LZOpenFileW
GetCurrentThreadId
VirtualAlloc

mpr

WNetSetLastErrorA
WNetLogonNotify
WNetSetConnectionA
WNetSetConnectionW
WNetGetLastErrorA
WNetPropertyDialogA
WNetDisconnectDialog
WNetGetSearchDialog
WNetGetConnection2W
WNetGetProviderTypeW
WNetGetConnectionA
WNetUseConnectionW
WNetDisconnectDialog1W
WNetDisconnectDialog2
WNetGetResourceInformationW
WNetGetUserW
WNetFormatNetworkNameA
WNetGetConnection3W
WNetDirectoryNotifyA
WNetPropertyDialogW

iphlpapi

GetBestInterface
GetIfTable
_PfAddGlobalFilterToInterface@8
GetTcpStatistics
GetUniDirectionalAdapterInfo
GetIpNetTable
SetIpNetEntry
InternalSetIpNetEntry
_PfUnBindInterface@4
EnableRouter
UnenableRouter
GetIpForwardTable
SetIpTTL
CreateIpNetEntry
InternalCreateIpForwardEntry

sqlunirl

_WritePrivateProfileSection_@12
_DrawText@20
_GetUnicodeRedirectionLayer@0
_GetProp@8
_ChangeDisplaySettings_@8
_LoadCursor@8
_GetEnhMetaFile_@4
_GetKeyboardLayoutName_@4
_LoadLibraryEx_@12
AbortSystemShutdown_
_CreateIC_@16
_MapVirtualKey_@8
_GetTextFace_@12

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12b43b9211b315d1d472fb44d8aa24a1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

mpr

iphlpapi

sqlunirl

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 18KB - Virtual size: 42KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 240B

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 18KB - Virtual size: 42KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 240B