a7d27266db94270f86a3351f1bafd2c4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a7d27266db94270f86a3351f1bafd2c4_JaffaCakes118
Size

124KB
MD5

a7d27266db94270f86a3351f1bafd2c4
SHA1

9a87fc26ea17f0ba9bd84cd001d6456d96e3802b
SHA256

ff2c3241faacf645efb27141366184c59844ead7800af37f820972d1a6c35d30
SHA512

146f694da5f9564566de74162dc3483122b6795c46489717d0214fd6711f93073746c476af589581cc8ab51a243938be58dbebb8d39f3b744d975f68655e1360
SSDEEP

1536:3s5q5hdxYK/uf7nGuTClKBNdv5Bolt0HxQqWBkOPqFUxnpeXNlKh7OaFEBdLrC:35XDmRTCM3hBo4RePxZsXNEhKaqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7d27266db94270f86a3351f1bafd2c4_JaffaCakes118

Files

a7d27266db94270f86a3351f1bafd2c4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1bb476d37d2e26ed6231b1dd0337c8c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
WaitForSingleObject
OpenEventA
UnmapViewOfFile
InterlockedDecrement
HeapFree
CreateDirectoryA
Sleep
GetVolumeInformationA
GetCurrentProcessId
lstrlenW
CloseHandle
GetComputerNameA
CreateFileA
ReleaseMutex
GetCommandLineA
GetModuleFileNameA
CreateEventA
InterlockedIncrement
GetModuleHandleA
GetProcAddress
LeaveCriticalSection
GetTickCount
InterlockedCompareExchange
HeapAlloc
EnterCriticalSection
lstrlenA
GetLastError
CreateMutexA
CreateFileMappingA
MapViewOfFile
CreateProcessA
ExitProcess
LoadLibraryA
SetLastError
CopyFileA
LocalFree
GetProcessHeap

ole32

OleCreate
CoUninitialize
CoInitialize
CoCreateGuid
OleSetContainedObject
CoTaskMemAlloc
CreateBindCtx

user32

KillTimer
GetParent
SetWindowsHookExA
GetMessageA
GetWindowLongA
DispatchMessageA
PostQuitMessage
DestroyWindow
PostMessageA
SetTimer
TranslateMessage
FindWindowA
CreateWindowExA
SendMessageA
GetClassNameA
UnhookWindowsHookEx
GetSystemMetrics
SetWindowLongA
RegisterWindowMessageA
DefWindowProcA
GetWindowThreadProcessId

oleaut32

SysFreeString
SysAllocString
SysAllocStringLen

shlwapi

StrStrIW
UrlUnescapeW

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
GetUserNameA
RegCreateKeyExA

shell32

SHGetFolderPathA

Exports

Exports

acxPathsvc

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bb476d37d2e26ed6231b1dd0337c8c2

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

shlwapi

advapi32

shell32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 102KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 104KB - Virtual size: 102KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 2KB