a76b8534da1a76fcd6c6d0a6ba1cb44f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a76b8534da1a76fcd6c6d0a6ba1cb44f_JaffaCakes118
Size

528KB
MD5

a76b8534da1a76fcd6c6d0a6ba1cb44f
SHA1

8574c566ef04557e4ebefb94f9f61d7763e0729c
SHA256

5ec25dd28e0c91b2f85976f66075969ed3ffcbcae49e1a23b8f7f78e79398c90
SHA512

705e3f6006e4220ff91a761e88e10818a7ee703d1dcf8b474bb1a598a4d486835ad6b74ea9f79c57a42359d14009d922cfaa2131e7f928ad6107c456bf10a67f
SSDEEP

6144:5AD9r6QGSZJ3aHtBsBn1n+nrnpnZ/owoVTTBbmiCpBg93Cc:5AJM5owoVTTVmJq3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a76b8534da1a76fcd6c6d0a6ba1cb44f_JaffaCakes118

Files

a76b8534da1a76fcd6c6d0a6ba1cb44f_JaffaCakes118
.dll windows:3 windows x86 arch:x86

12c32157cfb6cf7bebf68cc869598a1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MapViewOfFile
OpenEventA
ReadFile
ReleaseMutex
ResetEvent
SetEndOfFile
SetEvent
SetFilePointer
SetFileTime
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
CreateThread
ExitThread
FreeLibrary
GetCurrentThreadId
GetTickCount
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
IsBadReadPtr
SetErrorMode
HeapReAlloc
HeapSize
LoadLibraryA
GetLocalTime
GetLocaleInfoA
GetWindowsDirectoryA
FileTimeToSystemTime
GetCurrentProcess
GetDiskFreeSpaceA
GetDriveTypeA
GetFileTime
GetLogicalDrives
SetFileAttributesA
CreatePipe
DuplicateHandle
GetExitCodeProcess
PeekNamedPipe
ResumeThread
TerminateProcess
TerminateThread
GlobalFree
lstrlenA
lstrcmpiA
MultiByteToWideChar
GetFileSize
FormatMessageA
GetFileType
GetPrivateProfileSectionA
MoveFileA
VirtualAlloc
VirtualFree
WritePrivateProfileSectionA
HeapFree
HeapDestroy
HeapCreate
GetVolumeInformationA
GetVersion
GetTimeZoneInformation
GetTempPathA
CloseHandle
GetSystemTime
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFileAttributesA
GetCurrentProcessId
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateProcessA
CreateMutexA
CreateFileMappingA
CreateFileA
CreateEventA
GetEnvironmentVariableA

advapi32

RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
GetUserNameA

user32

GetClassNameA
GetClipboardData
GetMessageTime
GetParent
IsClipboardFormatAvailable
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
SendMessageTimeoutA
SetWindowsHookExA
TranslateMessage
UnhookWindowsHookEx
DispatchMessageA
ExitWindowsEx
CharToOemBuffA
GetActiveWindow
SetClipboardData
EmptyClipboard
ShowWindow
SetWindowTextA
GetClientRect
SetWindowLongA
MoveWindow
SystemParametersInfoA
GetWindowLongA
LoadCursorA
DefWindowProcA
CreateWindowExA
CloseClipboard
CallNextHookEx
PostThreadMessageA
OemToCharBuffA
EnumWindows
MessageBoxA
UnregisterClassA
DestroyWindow

wsock32

shutdown
gethostname
WSAAsyncSelect
WSAGetLastError
bind
connect
inet_ntoa
listen
recv
send
getsockname
ioctlsocket
closesocket
accept
WSAStartup
socket
WSAAsyncGetHostByAddr
WSAAsyncGetHostByName
WSACancelAsyncRequest
WSACleanup
inet_addr

rpcrt4

UuidCreate

shell32

ShellExecuteA

ole32

CoCreateInstance
OleUninitialize
CreateStreamOnHGlobal
GetHGlobalFromStream
StringFromGUID2
OleInitialize

oleaut32

SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound

Exports

Exports

DebugBreakpoint
DllCanUnloadNow
DllGetClassObject
Service
SpawnAndStart
Start
Uninstall

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shared
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12c32157cfb6cf7bebf68cc869598a1e

Headers

File Characteristics

Imports

kernel32

advapi32

user32

wsock32

rpcrt4

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 136KB

.bss Size: - Virtual size: 16B

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 18KB - Virtual size: 18KB

.idata Size: 4KB - Virtual size: 4KB

shared Size: 10KB - Virtual size: 9KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 136KB - Virtual size: 136KB

.bss
Size: - Virtual size: 16B

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 18KB - Virtual size: 18KB

.idata
Size: 4KB - Virtual size: 4KB

shared
Size: 10KB - Virtual size: 9KB

.reloc
Size: 8KB - Virtual size: 8KB