a12fc905757e038a819377abe50f027c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a12fc905757e038a819377abe50f027c_JaffaCakes118
Size

404KB
MD5

a12fc905757e038a819377abe50f027c
SHA1

8d8a853fa47f1809d777d825bd67c1d588a94348
SHA256

0b0ee2e663c9a671179b5a4d79574b8eb558a03cf3f5d1e7cce9aae36a45ae1f
SHA512

a18efeb3ec63868d7546bb5ac61e89a034c68bee3a5c30b551c8b307a5e7fe362a195358a4c5fb7cdd9fb4090e9a299053dd3a7686c2da570756e17add46f6b6
SSDEEP

6144:RWo5Uf9ujSaNJaLalbr9onmIfPqWZ03FG0HxJytH2iamHxqZp+pxe8Tbaap:soyf7aL0alP+n9qWc0pamY+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a12fc905757e038a819377abe50f027c_JaffaCakes118

Files

a12fc905757e038a819377abe50f027c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2b72174c1e6fdb9fcc3be78bc437a761

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFileExistsA

kernel32

CreateHardLinkW
HeapFree
CopyFileW
CopyFileExW
CopyFileExA
CopyFileA
ConvertThreadToFiber
ConvertDefaultLocale
ContinueDebugEvent
ConnectNamedPipe
CompareStringW
CompareStringA
CompareFileTime
CommConfigDialogW
CreateMailslotW
CreateMailslotA
CreateJobObjectW
CreateJobObjectA
CreateIoCompletionPort
CreateHardLinkA
CreateFileW
CreateFileMappingW
CreateFileMappingA
CreateFileA
CreateFiberEx
CreateFiber
CreateEventW
CreateEventA
CreateDirectoryW
CreateDirectoryExW
CreateDirectoryExA
CreateDirectoryA
CreateConsoleScreenBuffer
HeapAlloc
GetProcessHeap

user32

ChildWindowFromPointEx
ChildWindowFromPoint
ChangeClipboardChain
ChangeDisplaySettingsA
ChangeDisplaySettingsExA
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
ChangeMenuA
ChangeMenuW
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharLowerW
CharNextA
CharNextExA
CharNextW
CharPrevA
CharPrevExA
CharPrevW
CharToOemA
CharToOemBuffA
CharToOemBuffW
CharToOemW
CharUpperA
CharUpperBuffA
CharUpperBuffW
CharUpperW
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
CheckRadioButton

msvcrt

memset

winmm

mmioInstallIOProcA

setupapi

SetupDiCreateDeviceInfoListExW
CM_Locate_DevNodeA
CM_Locate_DevNodeW
CM_Locate_DevNode_ExA
CM_Locate_DevNode_ExW
CM_Merge_Range_List
CM_Modify_Res_Des
CM_Modify_Res_Des_Ex
CM_Move_DevNode
CM_Move_DevNode_Ex
CM_Next_Range
CM_Open_Class_KeyA
CM_Open_Class_KeyW
CM_Open_Class_Key_ExA
CM_Open_Class_Key_ExW
CM_Open_DevNode_Key
CM_Open_DevNode_Key_Ex
CM_Query_And_Remove_SubTreeA
CM_Query_And_Remove_SubTreeW
CM_Query_And_Remove_SubTree_ExA
CM_Query_And_Remove_SubTree_ExW
CM_Query_Arbitrator_Free_Data
CM_Query_Arbitrator_Free_Data_Ex
CM_Query_Arbitrator_Free_Size
CM_Query_Arbitrator_Free_Size_Ex
CM_Query_Remove_SubTree
CM_Query_Remove_SubTree_Ex
CM_Query_Resource_Conflict_List
CM_Reenumerate_DevNode
CM_Reenumerate_DevNode_Ex
CM_Register_Device_Driver
CM_Register_Device_Driver_Ex
CM_Register_Device_InterfaceA
CM_Register_Device_InterfaceW
CM_Register_Device_Interface_ExA
CM_Register_Device_Interface_ExW
CM_Remove_SubTree
CM_Remove_SubTree_Ex
SetupDiGetClassDescriptionA
SetupDiGetClassBitmapIndex
SetupDiEnumDriverInfoW
SetupDiEnumDriverInfoA
SetupDiEnumDeviceInterfaces
SetupDiEnumDeviceInfo
SetupDiDrawMiniIcon
SetupDiDestroyDriverInfoList
SetupDiDestroyDeviceInfoList
SetupDiDestroyClassImageList
SetupDiDeleteDeviceInterfaceData
SetupDiDeleteDeviceInfo
SetupDiDeleteDevRegKey
SetupDiCreateDeviceInterfaceW
SetupDiCreateDeviceInterfaceRegKeyW
SetupDiCreateDeviceInterfaceRegKeyA
SetupDiCreateDeviceInterfaceA
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoListExA
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoA
SetupDiCreateDevRegKeyW
SetupDiCreateDevRegKeyA
SetupDiClassNameFromGuidW
SetupDiClassNameFromGuidExW
SetupDiClassNameFromGuidExA
SetupDiClassNameFromGuidA
SetupDiClassGuidsFromNameW
SetupDiClassGuidsFromNameExW
SetupDiClassGuidsFromNameExA
SetupDiClassGuidsFromNameA
SetupDiChangeState
SetupDiCancelDriverInfoSearch
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDiBuildClassInfoListExW
SetupDiBuildClassInfoListExA
SetupDiBuildClassInfoList
SetupDiAskForOEMDisk
ExtensionPropSheetPageProc
CM_Unregister_Device_Interface_ExW
CM_Unregister_Device_Interface_ExA
CM_Unregister_Device_InterfaceW
CM_Unregister_Device_InterfaceA
CM_Uninstall_DevNode_Ex
CM_Uninstall_DevNode
CM_Test_Range_Available
CM_Setup_DevNode_Ex
CM_Setup_DevNode
CM_Set_HW_Prof_Flags_ExW
CM_Set_HW_Prof_Flags_ExA
CM_Set_HW_Prof_FlagsW
CM_Set_HW_Prof_FlagsA
CM_Set_HW_Prof_Ex
CM_Set_HW_Prof
CM_Set_DevNode_Registry_Property_ExW
CM_Set_DevNode_Registry_Property_ExA
CM_Set_DevNode_Registry_PropertyW
CM_Set_DevNode_Registry_PropertyA
CM_Set_DevNode_Problem_Ex
CM_Set_DevNode_Problem
CM_Set_Class_Registry_PropertyW
CM_Set_Class_Registry_PropertyA
CM_Run_Detection_Ex
CM_Run_Detection
CM_Request_Eject_PC_Ex
CM_Request_Eject_PC
CM_Request_Device_Eject_ExW
CM_Request_Device_Eject_ExA
CM_Request_Device_EjectW
CM_Request_Device_EjectA

Sections

.code
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 336KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b72174c1e6fdb9fcc3be78bc437a761

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

msvcrt

winmm

setupapi

Sections

.code Size: 36KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 336KB - Virtual size: 423KB

.data Size: 4KB - Virtual size: 1B

.rsrc Size: 4KB - Virtual size: 1B

.rdata Size: 4KB - Virtual size: 1B

.rsrc Size: 4KB - Virtual size: 712B

.reloc Size: 4KB - Virtual size: 1KB

.code
Size: 36KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 336KB - Virtual size: 423KB

.data
Size: 4KB - Virtual size: 1B

.rsrc
Size: 4KB - Virtual size: 1B

.rdata
Size: 4KB - Virtual size: 1B

.rsrc
Size: 4KB - Virtual size: 712B

.reloc
Size: 4KB - Virtual size: 1KB