b2c0e13f5de93ed4a0b7db0f5dbc86b6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b2c0e13f5de93ed4a0b7db0f5dbc86b6_JaffaCakes118
Size

342KB
MD5

b2c0e13f5de93ed4a0b7db0f5dbc86b6
SHA1

4910be7519affddca0b06111d1b611912e567241
SHA256

56d7440a02a25607c65ee9d8375e0d2c10d8897d52568b157a6aa8bcc29736d0
SHA512

292dc9d9ef3f07be33a8bf60c9f1d2b0278f94697e7073f269e05d43b7fcad7f9af9d806edb6046a23f694b773615451aef3c534e6216c70d6e6f577df0eadcf
SSDEEP

6144:VSN25RKQmd2EzLxelI1FslVFBLVDI1cT7kf9nBa/3OMYyKtpSu:gMtm8EZVLslVv1fOv12u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2c0e13f5de93ed4a0b7db0f5dbc86b6_JaffaCakes118

Files

b2c0e13f5de93ed4a0b7db0f5dbc86b6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

75e51385c7b21161396429dff5baff3c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
SetFileTime
MoveFileA
FlushFileBuffers
SetFilePointer
SetEndOfFile
GetFileType
CreateFileA
CreateFileW
ReadFile
SetLastError
WriteFile
GetDriveTypeA
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
GetFullPathNameA
DeleteFileA
DeleteFileW
DeviceIoControl
CreateDirectoryA
CreateDirectoryW
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
FindClose
GetLastError
FindFirstFileA
FindNextFileW
FindFirstFileW
GetVersionExA
GetModuleFileNameA
SetErrorMode
FreeLibrary
LoadLibraryA
LoadLibraryExA
CompareStringA
SetThreadPriority
GetCurrentThread
SetPriorityClass
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
IsDBCSLeadByte
GetCPInfo
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetEnvironmentVariableA
GetLocaleInfoA
FormatMessageA
LocalFree
SetConsoleCtrlHandler
GetStdHandle
GetConsoleMode
SetConsoleMode
FindNextFileA
ReadConsoleA
GetStringTypeW
GetStringTypeA
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
GetModuleHandleW
ExitProcess
GetSystemTimeAsFileTime
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
RaiseException
HeapSize
GetVersion
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetConsoleCP

user32

CharLowerW
ExitWindowsEx
CharLowerA
LoadStringA
CharUpperA
CharToOemBuffA
CharToOemA
OemToCharA
OemToCharBuffA
CharUpperW

advapi32

RegQueryValueExA
RegCloseKey
SetFileSecurityW
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Exports

Exports

CreateBlockReaderInterface
EnumImageFormatAttributeNext
EnumWBSettingRelease
Format
GetDevice
GetItemCount
GetPicture

Sections

.text
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75e51385c7b21161396429dff5baff3c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Exports

Exports

Sections

.text Size: 101KB - Virtual size: 104KB

.rdata Size: 133KB - Virtual size: 136KB

.data Size: 104KB - Virtual size: 104KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 101KB - Virtual size: 104KB

.rdata
Size: 133KB - Virtual size: 136KB

.data
Size: 104KB - Virtual size: 104KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 4KB