a5156ec585f934fa1589fe3d24f82d66_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a5156ec585f934fa1589fe3d24f82d66_JaffaCakes118
Size

64KB
MD5

a5156ec585f934fa1589fe3d24f82d66
SHA1

31d8cadc6acfd791ee681b80f2d22780e9f6be92
SHA256

859bec86fa7ecd54c72cb268ffc58bd5defbc626d63e7414b46cfe3082525ea1
SHA512

979899927136ecd2419985e72fc6c5ed27eafb77614f885183780da22b9531ae6e890c872c2a663705292f2163f6e2f230b4372319341f49aa6b47519e4155b2
SSDEEP

384:vS7eetIY2uQ0uWrPHD71vsBC7ikH6eiELzNwyeve+sGNoqvFe4wvDUwDFAe4IRy7:aCeNvt2yuEGOqdN9gAePR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5156ec585f934fa1589fe3d24f82d66_JaffaCakes118

Files

a5156ec585f934fa1589fe3d24f82d66_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d867bc3721de2cc76f21ed87802b8438

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReleaseMutex
GetLastError
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
lstrcmpiA
FindClose
FindNextFileA
FindFirstFileA
lstrcatA
GetSystemDirectoryA
CloseHandle
GetCurrentProcess
Module32First
VirtualProtectEx
LocalAlloc
GetFileSize
CopyFileA
GetModuleFileNameA
TerminateProcess
GlobalFree
GlobalUnlock
DeleteFileA
DisableThreadLibraryCalls
IsBadReadPtr
CreateFileA
GetCurrentProcessId
GetTickCount
WaitForSingleObject
GetWindowsDirectoryA
Sleep
GetModuleHandleA
CreateMutexA
LoadLibraryA
GetProcAddress
lstrcpyA
ReadFile
lstrlenA

user32

GetWindowRect
GetForegroundWindow
GetWindowTextA
ReleaseDC
wsprintfA
GetDC

gdi32

GetPaletteEntries
CreateHalftonePalette
DeleteObject
GetNearestPaletteIndex

advapi32

LookupPrivilegeValueA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
OpenProcessToken
CryptReleaseContext
CryptDestroyHash

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

shlwapi

StrStrIA

msvcrt

memcpy
free
_onexit
_purecall
_itoa
isprint
sscanf
strlen
__dllonexit
strstr
strncat
memcmp
strcmp
atoi
memset
strcpy
_beginthreadex
__CxxFrameHandler
fclose
fputc
fwrite
fopen
fflush
??2@YAPAXI@Z
strncpy

ws2_32

WSAStartup
gethostbyname
getpeername

Exports

Exports

GetName
_GetName@16

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 48.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shard
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d867bc3721de2cc76f21ed87802b8438

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcp60

shlwapi

msvcrt

ws2_32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.bss Size: - Virtual size: 48.1MB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 20KB - Virtual size: 20KB

shard Size: 9KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 4B

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 14KB - Virtual size: 14KB

.bss
Size: - Virtual size: 48.1MB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 20KB - Virtual size: 20KB

shard
Size: 9KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 4B

.reloc
Size: 15KB - Virtual size: 14KB