d3ac14f3c007ffd5b6db7d47139d74f1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d3ac14f3c007ffd5b6db7d47139d74f1_JaffaCakes118
Size

76KB
MD5

d3ac14f3c007ffd5b6db7d47139d74f1
SHA1

6c6d6599e06f019b06913195adb14f3a6ab9afbd
SHA256

6eab8cdd428d7569c5a71dfbaf31e51777ea79d253be0bcb6abb7d68e4bb1821
SHA512

8a078f619d1dae3f99beb639fcc2c12193c3584532c505053889254fc9ea6ca79995f1f73c172f139538f2c5bd9fa67a1ecfd6e3842366b036cef2f090e80342
SSDEEP

1536:VVUphc35HWSdCx9VfThDyCfHkaHDS4oC3+F:V5HBdS7dywkoDS4o5F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3ac14f3c007ffd5b6db7d47139d74f1_JaffaCakes118

Files

d3ac14f3c007ffd5b6db7d47139d74f1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2d5c62264803cbbca52ef0efa11d0c42

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
WaitForSingleObject
InitializeCriticalSection
GetLocalTime
GetVersionExA
GetComputerNameA
GetModuleFileNameA
CreateMutexA
CopyFileA
CreateThread
FindClose
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
DeleteFileA
CreateDirectoryA
RemoveDirectoryA
SetFileAttributesA
ReleaseMutex
GetSystemDirectoryA
GetStartupInfoA
FreeLibrary
GetDriveTypeA
GetLogicalDrives
ExpandEnvironmentStringsA
GetWindowsDirectoryA
GetCurrentProcessId
GlobalMemoryStatus
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
GetFileTime
PeekNamedPipe
DeleteCriticalSection
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
RtlUnwind
GetOEMCP
GetTickCount
WriteFile
LoadLibraryA
GetProcAddress
TerminateProcess
CreateProcessA
GetFileSize
ReadFile
SetFilePointer
GetLastError
Sleep
CreateFileA
CloseHandle
CreatePipe
GetACP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileType
GetStdHandle
SetHandleCount
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
HeapFree
HeapAlloc
MoveFileA
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue

user32

GetCursorPos
GetWindowTextA
SendMessageA
ShowWindow
EnumWindows
keybd_event
mouse_event
CloseClipboard
GetClipboardData
OpenClipboard
GetKeyState
GetAsyncKeyState
GetForegroundWindow
IsWindowVisible

advapi32

SetServiceStatus
RegCreateKeyA
RegEnumKeyExA
RegOpenKeyA
RegEnumValueA
EnumServicesStatusA
QueryServiceConfigA
QueryServiceConfig2A
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
GetUserNameA
RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
ControlService
QueryServiceStatus
DeleteService

ws2_32

select
WSACloseEvent
WSAEnumNetworkEvents
closesocket
WSAEventSelect
recv
setsockopt
connect
htons
socket
WSACreateEvent
inet_ntoa
WSACleanup
gethostbyname
WSAGetLastError
WSAStartup
send

psapi

GetProcessMemoryInfo
EnumProcessModules
GetModuleFileNameExA

Exports

Exports

ServiceHandler
ServiceMain

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d5c62264803cbbca52ef0efa11d0c42

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

psapi

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 21KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 21KB

.reloc
Size: 8KB - Virtual size: 5KB