aa8ae63e41ebd4b9b0e38fd6cb3f0b9a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aa8ae63e41ebd4b9b0e38fd6cb3f0b9a_JaffaCakes118
Size

95KB
MD5

aa8ae63e41ebd4b9b0e38fd6cb3f0b9a
SHA1

9d648410752d709ae6323bc9d1016a58d069c65c
SHA256

b680513e8e4005d3de97a41872ffd5029bd4612e33bd2259a264d49d29b9ed24
SHA512

579c3732f1dc90518724e0c0574139f579d2971ce01a3536bfa027969a61c5a963f2a5a0795c1d2cfdcb1d001f64f6d98cd8336be40d99810d2cbe5bf9f6694b
SSDEEP

1536:bdGhNdaUmNa3S10YeJyqWmJJKtxlGfYizIynNQGkHe39En0NJNLh:OYUZi10/VKtxlEYKhN3kH09E0NJNLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa8ae63e41ebd4b9b0e38fd6cb3f0b9a_JaffaCakes118

Files

aa8ae63e41ebd4b9b0e38fd6cb3f0b9a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a8fa47b2f943f601c8bacdc0597e3764

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetModuleHandleA
GetCurrentDirectoryW
GetSystemDirectoryW
GetModuleFileNameW
LoadLibraryW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
GetTickCount
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
VirtualQuery
InterlockedExchange
GetVersionExA
RtlUnwind
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetSystemInfo
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
GetProcAddress
LocalAlloc
lstrlenW
lstrcmpW
lstrcmpiW
CompareStringW
GetModuleHandleW
lstrcpynW
ExpandEnvironmentStringsW
GetCommandLineA
VirtualProtect

user32

KillTimer
SetTimer
ShowWindow
SetWindowLongW
GetDlgItem
GetParent
DestroyIcon
GetSysColorBrush
SendDlgItemMessageW
SendMessageW
WinHelpW
GetWindowLongW
LoadStringW
LoadIconW
GetSystemMetrics
CopyRect
GetWindowRect
CheckDlgButton
EndDialog
EnableWindow
SetDoubleClickTime
SwapMouseButton
MapWindowPoints
PtInRect
GetDC
SetDlgItemInt
DestroyCursor
InvalidateRect
GetSysColor
LoadImageW
LoadCursorW
IsDlgButtonChecked
ReleaseDC
ShowCursor
SetCursor
DrawFocusRect
CheckRadioButton
GetDlgItemInt
RegisterWindowMessageW
DialogBoxParamW
MessageBeep
CharNextW
MessageBoxW
GetFocus
DrawIcon
InflateRect
SystemParametersInfoW

advapi32

RegEnumValueW
RegQueryValueW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW

gdi32

SelectObject
GetDeviceCaps
SetLayout
GetLayout
ExtTextOutW
SetBkColor
SetTextColor
GetTextMetricsW
DeleteDC
DeleteObject

rpcrt4

I_RpcMapWin32Status
RpcServerRegisterIf2
RpcServerUseProtseqEpW

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8fa47b2f943f601c8bacdc0597e3764

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

rpcrt4

Sections

.text Size: 40KB - Virtual size: 40KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 36KB - Virtual size: 70KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 40KB - Virtual size: 40KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 36KB - Virtual size: 70KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 3KB - Virtual size: 3KB