a64ad2dc87f798f32b8a8c84f2113b8e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a64ad2dc87f798f32b8a8c84f2113b8e_JaffaCakes118
Size

124KB
MD5

a64ad2dc87f798f32b8a8c84f2113b8e
SHA1

0c501a835a2110f2ea8da4a7241432c90c1a2989
SHA256

839de82df3c9dccdd1f11b4bc1e1e85614da4d7ab85b39750831da3e6ecd35ce
SHA512

5711b87afe987b0f628f2f60cca08cae4cb7bc79b4d69e731444ff433e18596ec819dcd1f20671b9d079766356248c4ce07c64403bf443ce404cf42e68ccc034
SSDEEP

1536:N8oJwUqbS6z4JuVjdWRHaCe5Zsv8i8Fpj/Wm/HXNoV4ivIv0qypslRohULR9cmdG:N1SFz9W4JLPHXNOI8qypskk9cmd7u4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a64ad2dc87f798f32b8a8c84f2113b8e_JaffaCakes118

Files

a64ad2dc87f798f32b8a8c84f2113b8e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b4da12022b40b00c76d30279182b7d44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedCompareExchange
CreateEventA
LocalFree
ExitProcess
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
CopyFileA
SetLastError
HeapAlloc
GetModuleFileNameA
HeapFree
UnmapViewOfFile
GetProcessHeap
lstrlenA
OpenEventA
WaitForSingleObject
lstrlenW
Sleep
ReleaseMutex
CreateDirectoryA
CreateFileA
WriteFile
CreateMutexA
CloseHandle
GetModuleHandleA
GetCurrentProcessId
GetComputerNameA
GetLastError
GetTickCount
MapViewOfFile
EnterCriticalSection
LeaveCriticalSection
CreateProcessA
CreateFileMappingA

ole32

CreateBindCtx
CoInitialize
OleCreate
CoUninitialize
OleSetContainedObject
CoCreateGuid
CoTaskMemAlloc

user32

RegisterWindowMessageA
CreateWindowExA
SendMessageA
SetWindowsHookExA
UnhookWindowsHookEx
TranslateMessage
DestroyWindow
SetTimer
GetMessageA
SetWindowLongA
PostMessageA
PostQuitMessage
DispatchMessageA
GetWindowLongA
FindWindowA
KillTimer
GetSystemMetrics
DefWindowProcA
GetWindowThreadProcessId
GetClassNameA
GetParent

oleaut32

SysAllocString
SysFreeString
SysAllocStringLen

shlwapi

StrStrIW
UrlUnescapeW

advapi32

RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
GetUserNameA

shell32

SHGetFolderPathA

Exports

Exports

HandlerEventpnp

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4da12022b40b00c76d30279182b7d44

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

shlwapi

advapi32

shell32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 102KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 104KB - Virtual size: 102KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 2KB