af58d3d1c6f8275a606b87834a14369a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

af58d3d1c6f8275a606b87834a14369a_JaffaCakes118
Size

97KB
MD5

af58d3d1c6f8275a606b87834a14369a
SHA1

c2df32f2fa04f90d89fc556c8c28045ccc5ce973
SHA256

8b4880f52f59e1399a16e56ff820e5a0eab13c532fe840c398de729facfc6ae4
SHA512

7fcc09f5b7d96bcbbd3959de7160421ff884eba01bd2ec73c883210e9b01e01f0aa582ebc593e4b30bfe62d3a2e999b641132007b97309d60cfdb745da44496e
SSDEEP

1536:ak9GV7FUH1wiqZntmq9ozJsrhLet50ck8P8M65JAnaTu87dKpXe:8W16mq9qWrhifliInCu8s5e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af58d3d1c6f8275a606b87834a14369a_JaffaCakes118

Files

af58d3d1c6f8275a606b87834a14369a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

51f635f359e5318d3bd836ec2f25c6b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SysFreeString
SysStringLen
VariantClear
VariantCopyInd
LoadTypeLib
SysAllocStringLen

advapi32

RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA
RegCloseKey
RegQueryValueA

ole32

CoGetClassObject
CoInitialize
CoLockObjectExternal
CoTaskMemFree
GetConvertStg
CoUninitialize
CreateBindCtx
CreateDataAdviseHolder
DoDragDrop
WriteFmtUserTypeStg
WriteClassStg
ProgIDFromCLSID
OleUninitialize
OleLockRunning
OleInitialize
GetRunningObjectTable
CoCreateInstance

user32

MessageBoxA
LoadMenuA
IsCharUpperA
DrawTextA
DrawMenuBar
DestroyMenu
CreateMenu
CreateDesktopW
ActivateKeyboardLayout
RegisterClassA

shell32

SHFileOperationA
SHGetFileInfoA
SHGetMalloc
SHBindToParent

shlwapi

PathIsDirectoryA
PathQuoteSpacesA
StrChrA
PathCompactPathExA
PathFileExistsA

msvcrt

sprintf
realloc
strcmp
time
memset
_errno
_except_handler3
free
sscanf
malloc

kernel32

CloseHandle
ExitProcess
FlushFileBuffers
GetACP
GetCommandLineA
GetDateFormatA
GetFileSize
GetLastError
GetLocalTime
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTime
HeapAlloc
InterlockedIncrement
RaiseException
RtlUnwind
SetLastError
lstrcatA
lstrcpyA
lstrlenA

Exports

Exports

Bns
Cc
Lsimvt
Pima
Yjpl
Zdo

Sections

.text
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51f635f359e5318d3bd836ec2f25c6b6

Headers

File Characteristics

Imports

oleaut32

advapi32

ole32

user32

shell32

shlwapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 28KB

.rdata Size: 30KB - Virtual size: 32KB

.data Size: 35KB - Virtual size: 36KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 28KB

.text
Size: 25KB - Virtual size: 28KB

.rdata
Size: 30KB - Virtual size: 32KB

.data
Size: 35KB - Virtual size: 36KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 28KB