d551219c86b41787307a817b6baec9ac_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d551219c86b41787307a817b6baec9ac_JaffaCakes118
Size

36KB
MD5

d551219c86b41787307a817b6baec9ac
SHA1

c30ad95108e649a0f9fb9b1e7fe788edeadec6ab
SHA256

89dc646e0575ae80b265cabb000e73dfdcff6f861d7adeb26bcd72cc97ca7e9a
SHA512

ed43338cd1e7c2a23a9864ccc1280cf40c4f950d8a0633eff286ca6300d4e660e5346843863c9f286aeb37e0c6ac193b20e93a07a70bfb2bce28bbcfb2833656
SSDEEP

768:lC5Su9S1SumsST2wkUj2OxL4gee4geijp3L31h:lC5SQS1SNT3kUjN4gee4geij/h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d551219c86b41787307a817b6baec9ac_JaffaCakes118

Files

d551219c86b41787307a817b6baec9ac_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5fd7c12ab3f445d38d54dbdf13a4808b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
DeleteFileA
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushInstructionCache
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDirectoryA
GetThreadPriority
GetThreadSelectorEntry
GetTickCount
GetUserDefaultLCID
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MoveFileA
MulDiv
MultiByteToWideChar
OpenProcess
RaiseException
ReadFile
RtlUnwind
SearchPathA
SetConsoleCtrlHandler
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetPriorityClass
SetThreadLocale
SetThreadPriority
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerLanguageNameA
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrlenW

user32

KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
MapDialogRect
MapVirtualKeyA
MessageBoxA
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
RedrawWindow
RegisterClassA
ReleaseCapture
ReleaseDC
RemoveMenu

advapi32

RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fd7c12ab3f445d38d54dbdf13a4808b

Headers

File Characteristics

Imports

version

kernel32

user32

advapi32

Sections

.text Size: 2KB - Virtual size: 4KB

.rdata Size: 18KB - Virtual size: 20KB

.rsrc Size: 15KB - Virtual size: 16KB

.text
Size: 2KB - Virtual size: 4KB

.rdata
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 15KB - Virtual size: 16KB