b8edec85401f712eb25c6bab5083aea7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b8edec85401f712eb25c6bab5083aea7_JaffaCakes118
Size

152KB
MD5

b8edec85401f712eb25c6bab5083aea7
SHA1

cc8cabffa34c3d62e47a82cf3ba5796b396577f8
SHA256

d5201fc27ec94afd7ed3a3456f63238c0342e35be08e5f6ccd965a1b1e18e153
SHA512

6f905207325f0f34d0fb8dbcae68bade470cffae3ff715f31ba03e563994bbaae57e014705641cfe003d5551f1452ab842da696106476f6350a756e947444b17
SSDEEP

3072:FHDQHO/2id81s0fGO66CBgzlx83RI4OjGzd+ucYEZ+TQ17SstMiuOo6oaBbfA:FH0HO9u1xfCBsx8e4OjGZ+tYEAM17fMu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8edec85401f712eb25c6bab5083aea7_JaffaCakes118

Files

b8edec85401f712eb25c6bab5083aea7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

191b1e97c6658a777dabd51183b50dc6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
MapViewOfFile
GetTickCount
HeapFree
SetLastError
WriteProcessMemory
WriteFile
TerminateProcess
ReadProcessMemory
GetCommandLineA
HeapAlloc
GetVolumeInformationA
GetProcessHeap
GetModuleHandleA
OpenEventA
InterlockedIncrement
GlobalAlloc
GlobalFree
OpenFileMappingA
CreateFileMappingA
GetModuleFileNameA
CreateFileA
Sleep
LeaveCriticalSection
LocalFree
CreateMutexW
GetProcAddress
InterlockedCompareExchange
ExitProcess
GetCurrentProcess
GetLastError
LoadLibraryA
CreateProcessA
UnmapViewOfFile
CloseHandle
CreateDirectoryA
GetComputerNameA
CopyFileA
CreateEventA
InterlockedDecrement
WaitForSingleObject

ole32

CoUninitialize
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
OleSetContainedObject
CoInitialize
CoSetProxyBlanket
OleCreate

user32

GetCursorPos
KillTimer
PeekMessageA
CreateWindowExA
GetWindow
GetWindowLongA
GetWindowThreadProcessId
RegisterWindowMessageA
DispatchMessageA
DestroyWindow
GetClassNameA
SetWindowsHookExA
SendMessageA
UnhookWindowsHookEx
SetWindowLongA
GetSystemMetrics
DefWindowProcA
GetMessageA
GetParent
SetTimer
ScreenToClient
PostQuitMessage
ClientToScreen
FindWindowA
TranslateMessage

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen
SysAllocString

shlwapi

UrlUnescapeW
StrStrIW

advapi32

RegDeleteValueA
GetUserNameA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
DuplicateTokenEx
SetTokenInformation
RegSetValueExA
OpenProcessToken

shell32

SHGetFolderPathA

Exports

Exports

SyncMobilenet

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

191b1e97c6658a777dabd51183b50dc6

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

shlwapi

advapi32

shell32

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 1008B

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 1008B

.reloc
Size: 8KB - Virtual size: 6KB