b3e066ecac290d3e5ad79bf14dcb6e15_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b3e066ecac290d3e5ad79bf14dcb6e15_JaffaCakes118
Size

47KB
MD5

b3e066ecac290d3e5ad79bf14dcb6e15
SHA1

6a62825a1e2679c6a3c2627a5ea0a140d39b629c
SHA256

eecadb5476109d51c6769230e0e499382eb3ba15bb74eff0f155e3dc72b50abb
SHA512

adf18f45fedb5639d376af90b9a10ad1789dd5c5f0ab306e7f88705d697244641b2953427ee5d9c28cc38190eb1257e82a85a1b848d8bc2745f436abc9ef3a60
SSDEEP

768:ZzmemXXwTpVKxydcHSxTu9IReZbu+zLTfasqLERjUjHmMQFtT4TnoGcvIZ1S:Z6zX8GIdcHSxC9rZZzLrasnRjUjHmMQr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3e066ecac290d3e5ad79bf14dcb6e15_JaffaCakes118

Files

b3e066ecac290d3e5ad79bf14dcb6e15_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8dd86af14051372c1bbe1f9649995acd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
EnumResourceLanguagesW
EnumResourceTypesA
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetVersion
HeapAlloc
LeaveCriticalSection
LocalAlloc
MultiByteToWideChar
OpenFile
SetLastError
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualFree
lstrcmpiA
lstrcpyA
lstrcpynA

msvcrt

fwprintf
free
_wcsicmp
__set_app_type
__getmainargs
__p__commode
exit

ole32

CLSIDFromString
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateOleAdviseHolder
OleInitialize
OleQueryLinkFromData
RegisterDragDrop
StgCreateDocfile
StringFromGUID2
WriteClassStg
WriteClassStm

ntdll

NtOpenKey
NtOpenSymbolicLinkObject
NtOpenThreadToken
NtCreateSemaphore
RtlCharToInteger
RtlEnterCriticalSection
RtlInitString
RtlInitUnicodeString
RtlLeaveCriticalSection
RtlNtStatusToDosError
NtCreateSection
LdrUnloadDll
RtlAppendUnicodeStringToString

shlwapi

SHSetValueW
PathSkipRootW
PathIsUNCW
StrCmpIW
PathFindNextComponentW
PathFindFileNameW
PathFindExtensionW
StrFormatKBSizeW
StrRChrW
StrRetToBufW
PathAppendW
PathAddBackslashW
PathIsPrefixW
AssocCreate

comdlg32

ChooseColorA
CommDlgExtendedError
GetFileTitleW
GetOpenFileNameA
ChooseFontW
FindTextW
FindTextA
ChooseColorW
PrintDlgW
PageSetupDlgW
PageSetupDlgA
LoadAlterBitmap
GetSaveFileNameW
GetOpenFileNameW

comctl32

ImageList_ReplaceIcon
InitCommonControlsEx

winmm

mixerGetLineInfoA
mmGetCurrentTask
midiStreamOpen

oleaut32

SafeArrayCreate
GetErrorInfo
ClearCustData
SetErrorInfo
SysFreeString
SysReAllocString
OleLoadPicture

user32

GetMenu
ShowCaret
OemToCharW
OemToCharBuffA
CharToOemBuffA
CharUpperA
CreateCursor
DrawCaption
EmptyClipboard
EnableScrollBar
GetMessageA
IsCharLowerA
LoadImageA
LoadMenuA
MessageBoxIndirectA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8dd86af14051372c1bbe1f9649995acd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ole32

ntdll

shlwapi

comdlg32

comctl32

winmm

oleaut32

user32

Sections

.text Size: 19KB - Virtual size: 18KB

.data Size: 6KB - Virtual size: 5KB

.rsrc Size: 21KB - Virtual size: 20KB

.text
Size: 19KB - Virtual size: 18KB

.data
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 21KB - Virtual size: 20KB