bd883d954444136909950a6421d4dd98_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
bd883d954444136909950a6421d4dd98_JaffaCakes118
Size 1.2MB
Sample240823-25xslssene
SHA256 f8dee334edc64c7632389ce96664ef1abdedd74e8aa1f499f08e238dd913dba4
MD5 bd883d954444136909950a6421d4dd98
SHA1 fbdc18ca772d8ddd7c2304e52ed35c2c98769d42
SHA512 9adef86f3bc2f49ecae239cbd5f24ae5dbd7811ca8ba0cd6cf15cbe06d62ebc0e22719b5834fee5c0c7cf1f1b14add43c5ab4dd751040799d7f0ea1eb312d65d
SSDEEP 24576:rVHchfFcSTdS1ZikTqpaIJvzSqbY/0Z2ZlECMNXkTlzvmJL8:rV8hf6STw1ZlQauvzSq01ICe6zvm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd883d954444136909950a6421d4dd98_JaffaCakes118

File Explorer

bd883d954444136909950a6421d4dd98_JaffaCakes118

.dll 1.2MB

bd883d954444136909950a6421d4dd98_JaffaCakes118

IMPHASH a23d507241571c69f1f380438b3a251c
SHA256 f8dee334edc64c7632389ce96664ef1abdedd74e8aa1f499f08e238dd913dba4
MD5 bd883d954444136909950a6421d4dd98
SHA1 fbdc18ca772d8ddd7c2304e52ed35c2c98769d42
SHA512 9adef86f3bc2f49ecae239cbd5f24ae5dbd7811ca8ba0cd6cf15cbe06d62ebc0e22719b5834fee5c0c7cf1f1b14add43c5ab4dd751040799d7f0ea1eb312d65d
SSDEEP 24576:rVHchfFcSTdS1ZikTqpaIJvzSqbY/0Z2ZlECMNXkTlzvmJL8:rV8hf6STw1ZlQauvzSq01ICe6zvm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

936224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

dpamnlrd.pdb

DllMain PeerCollabAddContact PeerCollabAsyncInviteContact PeerCollabAsyncInviteEndpoint PeerCollabCancelInvitation PeerCollabCloseHandle PeerCollabDeleteContact PeerCollabDeleteEndpointData PeerCollabDeleteObject PeerCollabEnumApplicationRegistrationInfo PeerCollabEnumApplications PeerCollabEnumContacts PeerCollabEnumEndpoints PeerCollabEnumObjects PeerCollabEnumPeopleNearMe PeerCollabExportContact PeerCollabGetAppLaunchInfo PeerCollabGetApplicationRegistrationInfo PeerCollabGetContact PeerCollabGetEndpointName PeerCollabGetEventData PeerCollabGetInvitationResponse PeerCollabGetPresenceInfo PeerCollabGetSigninOptions PeerCollabInviteContact PeerCollabInviteEndpoint PeerCollabParseContact PeerCollabQueryContactData PeerCollabRefreshEndpointData PeerCollabRegisterApplication PeerCollabRegisterEvent PeerCollabSetEndpointName PeerCollabSetObject PeerCollabSetPresenceInfo PeerCollabShutdown PeerCollabSignin PeerCollabSignout PeerCollabStartup PeerCollabSubscribeEndpointData PeerCollabUnregisterApplication PeerCollabUnregisterEvent PeerCollabUnsubscribeEndpointData PeerCollabUpdateContact PeerCreatePeerName PeerEndEnumeration PeerEnumGroups PeerEnumIdentities PeerFreeData PeerGetItemCount PeerGetNextItem PeerGroupAddRecord PeerGroupClose PeerGroupCloseDirectConnection PeerGroupConnect PeerGroupConnectByAddress PeerGroupCreate PeerGroupCreateInvitation PeerGroupCreatePasswordInvitation PeerGroupDelete PeerGroupDeleteRecord PeerGroupEnumConnections PeerGroupEnumMembers PeerGroupEnumRecords PeerGroupExportConfig PeerGroupExportDatabase PeerGroupGetEventData PeerGroupGetProperties PeerGroupGetRecord PeerGroupGetStatus PeerGroupImportConfig PeerGroupImportDatabase PeerGroupIssueCredentials PeerGroupJoin PeerGroupOpen PeerGroupOpenDirectConnection PeerGroupParseInvitation PeerGroupPasswordJoin PeerGroupPeerTimeToUniversalTime PeerGroupRegisterEvent PeerGroupResumePasswordAuthentication PeerGroupSearchRecords PeerGroupSendData PeerGroupSetProperties PeerGroupShutdown PeerGroupStartup PeerGroupUniversalTimeToPeerTime PeerGroupUnregisterEvent PeerGroupUpdateRecord PeerHostNameToPeerName PeerIdentityCreate PeerIdentityDelete PeerIdentityExport PeerIdentityGetCert PeerIdentityGetCryptKey PeerIdentityGetDefault PeerIdentityGetFriendlyName PeerIdentityGetXML PeerIdentityImport PeerIdentitySetFriendlyName PeerNameToPeerHostName PeerPnrpEndResolve PeerPnrpGetCloudInfo PeerPnrpGetEndpoint PeerPnrpRegister PeerPnrpResolve PeerPnrpShutdown PeerPnrpStartResolve PeerPnrpStartup PeerPnrpUnregister PeerPnrpUpdateRegistration PeerSSPAddCredentials PeerSSPRemoveCredentials

Name

.text

Size

912KB

Virtual Size

911KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

324B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

360B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

276KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

1024B

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=241, id=145, productName=VS2008 SP1 build 30729, version=30729,

count=416, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=380, id=223, productName=VS2013 UPD2 build 30501, version=30501,

count=267, id=221, productName=VS2013 UPD3 build 30723, version=30723,

id=256, productName=VS2015 UPD2 build 23918, version=23918,

count=364, id=131, productName=VS2008 build 21022, version=21022,

count=419, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=123, id=257, productName=VS2015 UPD1 build 23506, version=23506,

count=260, id=203, productName=VS2012 build 50727, version=50727,

count=158, id=123, productName=VS2005 build 50727, version=50727,

count=452, id=203, productName=VS2012 UPD4 build 61030, version=61030,

count=201, id=223, productName=VS2013 UPD2 build 30501, version=30501,

count=433, id=202, productName=VS2012 UPD3 build 60610, version=60610,

count=136, id=202, productName=VS2012 UPD3 build 60610, version=60610,

count=121, id=202, productName=VS2012 UPD4 build 61030, version=61030,

bd883d954444136909950a6421d4dd98_JaffaCakes118

comdlg32

advapi32

user32

kernel32

gdi32

generic