a15d18395fc8a6bdd5fbecb71ede6626_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a15d18395fc8a6bdd5fbecb71ede6626_JaffaCakes118
Size

50KB
MD5

a15d18395fc8a6bdd5fbecb71ede6626
SHA1

1e99108f0badebfb72ce91192048430593885e1a
SHA256

099868cae92f92a59e2d836742a55eaf1639cd3015a26f2e060a51ec9cb85778
SHA512

79fa663864ae32dd7614a5e68e1ca9feea8f9065bd79c4ee23fb5b95fdc402e1d292dbb3bef3a6abcdc0f457a25c0e83c9e2dfe305de5ab601f7a36e21992fc4
SSDEEP

768:kqG8ZFICnrN8qCRVQsXXYba93snTvhFNYG9QlEv:PDZfHUXXYW9cnT5LY9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a15d18395fc8a6bdd5fbecb71ede6626_JaffaCakes118

Files

a15d18395fc8a6bdd5fbecb71ede6626_JaffaCakes118
.dll windows:5 windows x86 arch:x86

98965317d5e069b740a109aab16502f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisconnectNamedPipe
DnsHostnameToComputerNameW
DuplicateHandle
EnumCalendarInfoExW
EnumCalendarInfoW
EnumDateFormatsExA
EnumResourceLanguagesA
EnumSystemLanguageGroupsW
EnumSystemLocalesA
EnumTimeFormatsW
EnumUILanguagesA
ExitProcess
FatalAppExitA
FatalAppExitW
FileTimeToLocalFileTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstVolumeA
FindFirstVolumeW
FindNextChangeNotification
FindNextVolumeMountPointA
FindNextVolumeMountPointW
FindResourceExA
FindResourceW
FlushConsoleInputBuffer
FlushFileBuffers
FoldStringA
FreeLibraryAndExitThread
FreeResource
GenerateConsoleCtrlEvent
GetBinaryTypeA
GetBinaryTypeW
GetCPInfo
GetCPInfoExW
GetCalendarInfoA
GetCalendarInfoW
GetCommMask
GetConsoleAliasExesLengthW
GetConsoleAliasesW
GetConsoleCP
GetConsoleDisplayMode
GetConsoleFontSize
GetConsoleMode
GetCurrentConsoleFont
GetCurrentThread
GetDateFormatA
GetDefaultCommConfigA
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetEnvironmentStrings
GetEnvironmentStringsA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetLargestConsoleWindowSize
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetMailslotInfo
GetModuleFileNameA
GetNamedPipeInfo
GetNumberFormatW
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetPrivateProfileStructW
GetProcessPriorityBoost
GetProcessVersion
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetStringTypeA
GetStringTypeExA
GetSystemDirectoryA
GetSystemInfo
GetSystemPowerStatus
GetThreadPriorityBoost
GetTimeFormatA
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersionExA
GetVolumeInformationW
GetVolumeNameForVolumeMountPointA
GetVolumeNameForVolumeMountPointW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAddAtomA
GlobalDeleteAtom
GlobalFindAtomA
GlobalFix
GlobalGetAtomNameA
GlobalMemoryStatus
GlobalWire
DeviceIoControl
HeapCreate
HeapDestroy
HeapLock
HeapUnlock
HeapWalk
InitializeCriticalSection
InterlockedExchangeAdd
IsBadStringPtrA
IsBadStringPtrW
IsDBCSLeadByteEx
IsDebuggerPresent
LCMapStringA
LoadLibraryA
LoadLibraryExW
LocalHandle
LocalSize
LockResource
MapUserPhysicalPages
MoveFileWithProgressW
MulDiv
OpenFileMappingA
OpenFileMappingW
OpenJobObjectW
OutputDebugStringA
PeekConsoleInputW
PostQueuedCompletionStatus
PrepareTape
QueryPerformanceFrequency
RaiseException
ReadDirectoryChangesW
ReleaseMutex
RemoveDirectoryA
RemoveDirectoryW
ReplaceFileA
RequestWakeupLatency
ResetWriteWatch
RtlFillMemory
RtlMoveMemory
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SearchPathW
SetCommState
SetComputerNameA
SetConsoleCursorInfo
SetConsoleWindowInfo
SetCurrentDirectoryA
SetDefaultCommConfigA
SetDefaultCommConfigW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFileApisToANSI
SetFileTime
SetHandleInformation
SetLocaleInfoW
SetMailslotInfo
SetNamedPipeHandleState
SetSystemTime
SetThreadContext
SetTimeZoneInformation
SystemTimeToFileTime
TerminateThread
Thread32First
Thread32Next
TlsGetValue
Toolhelp32ReadProcessMemory
TransmitCommChar
UnhandledExceptionFilter
UnlockFile
UnregisterWaitEx
UpdateResourceA
VerSetConditionMask
VerifyVersionInfoA
VirtualUnlock
WaitCommEvent
WaitNamedPipeA
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleA
WriteConsoleOutputA
WriteConsoleW
WritePrivateProfileSectionA
WritePrivateProfileSectionW
WritePrivateProfileStringA
WritePrivateProfileStringW
WritePrivateProfileStructA
WriteProfileSectionA
_hread
_llseek
_lopen
lstrcatW
lstrcmpiA
lstrcpynW
DeleteVolumeMountPointW
DeleteFileW
VirtualAllocEx
DebugBreak
CreateToolhelp32Snapshot
CreateThread
CreateSemaphoreW
CreateNamedPipeW
CreateNamedPipeA
CreateDirectoryExW
CreateDirectoryA
CopyFileA
ConvertThreadToFiber
ContinueDebugEvent
CompareStringA
CallNamedPipeW
CallNamedPipeA
BuildCommDCBAndTimeoutsA
BindIoCompletionCallback
BackupRead
AreFileApisANSI
AddAtomW
GetCommandLineA
HeapCompact

user32

LoadIconA

comdlg32

ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
ReplaceTextW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
GetOpenFileNameW
ChooseColorA

advapi32

RegOpenKeyExA

ole32

CLIPFORMAT_UserUnmarshal
CLSIDFromProgID
CLSIDFromProgIDEx
CLSIDFromString
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoCreateInstance
CoCreateInstanceEx
CoDisableCallCancellation
CoDisconnectObject
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoGetApartmentID
CoGetCallContext
CoGetClassObject
CoGetClassVersion
CoGetCurrentLogicalThreadId
CoGetCurrentProcess
CoGetInterfaceAndReleaseStream
CoGetMarshalSizeMax
CoGetObject
CoGetObjectContext
CoGetPSClsid
CoGetStdMarshalEx
CoInitialize
CoInitializeSecurity
CoInitializeWOW
CoIsHandlerConnected
CoLoadLibrary
CoLockObjectExternal
CoMarshalHresult
CoMarshalInterThreadInterfaceInStream
CoMarshalInterface
CoQueryClientBlanket
CoQueryReleaseObject
CoRegisterChannelHook
CoRegisterClassObject
CoRegisterMallocSpy
CoRegisterMessageFilter
CoRegisterPSClsid
CoRegisterSurrogate
CoRegisterSurrogateEx
CoReleaseMarshalData
CoReleaseServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoRevokeMallocSpy
CoSetCancelObject
CoSuspendClassObjects
CoSwitchCallContext
CoTestCancel
CoTreatAsClass
CoUninitialize
CoUnmarshalInterface
CreateAntiMoniker
CreateClassMoniker
CreateDataAdviseHolder
CreateFileMoniker
CreateILockBytesOnHGlobal
CreateItemMoniker
CreateObjrefMoniker
CreateOleAdviseHolder
CreateStdProgressIndicator
CreateStreamOnHGlobal
DcomChannelSetHResult
DllDebugObjectRPCHook
DllGetClassObjectWOW
DoDragDrop
EnableHookObject
FmtIdToPropStgName
GetClassFile
GetDocumentBitStg
GetHGlobalFromStream
HACCEL_UserFree
HACCEL_UserMarshal
HBITMAP_UserFree
HBITMAP_UserMarshal
HBITMAP_UserUnmarshal
HBRUSH_UserFree
HBRUSH_UserMarshal
HBRUSH_UserUnmarshal
HDC_UserFree
HDC_UserMarshal
HDC_UserSize
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HENHMETAFILE_UserUnmarshal
HGLOBAL_UserFree
HGLOBAL_UserSize
CLIPFORMAT_UserMarshal
HICON_UserFree
HICON_UserMarshal
HICON_UserSize
HICON_UserUnmarshal
HMENU_UserFree
HMENU_UserMarshal
HMENU_UserSize
HMETAFILEPICT_UserFree
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserSize
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HMETAFILE_UserUnmarshal
HPALETTE_UserFree
HPALETTE_UserSize
HPALETTE_UserUnmarshal
HWND_UserSize
HWND_UserUnmarshal
MonikerCommonPrefixWith
MonikerRelativePathTo
OleBuildVersion
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorageEx
OleCreateDefaultHandler
OleCreateEmbeddingHelper
OleCreateFromDataEx
OleCreateFromFile
OleCreateFromFileEx
OleCreateLink
OleCreateLinkFromData
OleCreateLinkToFile
OleCreateMenuDescriptor
OleCreateStaticFromData
OleDestroyMenuDescriptor
OleDraw
OleDuplicateData
OleFlushClipboard
OleGetClipboard
OleGetIconOfFile
OleIsCurrentClipboard
OleLoad
OleLoadFromStream
OleLockRunning
OleQueryLinkFromData
OleRegEnumFormatEtc
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleRun
OleSave
OleSaveToStream
OleSetContainedObject
OleSetMenuDescriptor
OleTranslateAccelerator
OleUninitialize
ProgIDFromCLSID
PropStgNameToFmtId
PropVariantClear
ReadClassStg
ReadClassStm
ReadFmtUserTypeStg
ReadOleStg
ReleaseStgMedium
RevokeDragDrop
SNB_UserFree
SNB_UserMarshal
SNB_UserUnmarshal
STGMEDIUM_UserFree
STGMEDIUM_UserMarshal
STGMEDIUM_UserUnmarshal
SetDocumentBitStg
StgConvertVariantToProperty
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgCreatePropStg
StgGetIFillLockBytesOnFile
StgIsStorageILockBytes
StgOpenPropStg
StgOpenStorage
StgOpenStorageEx
StgOpenStorageOnILockBytes
StgPropertyLengthAsVariant
StgSetTimes
StringFromCLSID
StringFromGUID2
UpdateDCOMSettings
UtConvertDvtd32toDvtd16
UtGetDvtd16Info
UtGetDvtd32Info
WdtpInterfacePointer_UserFree
WdtpInterfacePointer_UserMarshal
WdtpInterfacePointer_UserUnmarshal
WriteClassStm
CLIPFORMAT_UserFree
HGLOBAL_UserUnmarshal

msvcrt

memcpy

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98965317d5e069b740a109aab16502f6

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

msvcrt

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 164B

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 164B

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB