d3e89e50fcccdedb2919c4e37d792ee2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d3e89e50fcccdedb2919c4e37d792ee2_JaffaCakes118
Size

338KB
MD5

d3e89e50fcccdedb2919c4e37d792ee2
SHA1

5b8870a3bdc2b2e6700cae0849cdb92008a719e4
SHA256

91f680824724dbcfd9dd557c177992dba81f37ed1d7276a726c9a269ca4e943f
SHA512

43838013633de1e2bb84df1439398f6d2c46f46202912bd241a088bbc27e9af0580adb709771b0dc0c8f4a7ce29320df614106ed9f5f00192e6a0472aa13f32e
SSDEEP

6144:3A1ejIZxsdjSZHZYJcGzhq0NJ37TwipQqOuyuXwavivVwclzEgza:Pa8GHZYJc4/rkipQhuJXwI2VwAza

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3e89e50fcccdedb2919c4e37d792ee2_JaffaCakes118

Files

d3e89e50fcccdedb2919c4e37d792ee2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

51ac856b9da3bb01184609998fa33f8b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

qsort
??3@YAXPAX@Z
realloc
??2@YAPAXI@Z
_wcsupr
towupper
isdigit
_callnewh
__CxxFrameHandler
free
_wcsicmp
_CxxThrowException
__RTDynamicCast
_purecall
wcslen
wcsspn
_except_handler3
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_adjust_fdiv
_initterm
wcstoul
wcstombs
wcschr
??0exception@@QAE@ABQBD@Z
malloc
??0exception@@QAE@ABV0@@Z
bsearch
wcscpy
wcsrchr
wcscat
wcsncmp

msvcp60

?nothrow@std@@3Unothrow_t@1@B
??_7bad_alloc@std@@6B@
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

iassvcs

IASVariantChangeType
IASUninitialize
IASInitialize

advapi32

StartServiceW
CloseServiceHandle
RegConnectRegistryW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
OpenServiceW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
OpenSCManagerW
ControlService
QueryServiceStatus

kernel32

lstrlenW
lstrcpyW
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
LeaveCriticalSection
EnterCriticalSection
GetLastError
CloseHandle
HeapDestroy
DeleteCriticalSection
lstrcatW
GetModuleFileNameW
lstrcpynW
FreeLibrary
LoadLibraryA
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
LocalFree
lstrcmpW
GetProcAddress
GetComputerNameW
GetComputerNameExW
InitializeCriticalSection
SleepEx
CreateThread
QueueUserAPC
GetVersionExW
DisableThreadLibraryCalls
SetLastError
FormatMessageA
Sleep
InterlockedExchange
VirtualQuery
SystemTimeToFileTime
lstrcmpiW

netapi32

NetWkstaGetInfo
DsRoleGetPrimaryDomainInformation
NetApiBufferFree
DsGetDcNameW

ole32

CLSIDFromProgID
CoSetProxyBlanket
OleRun
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance

rtutils

TraceRegisterExW
TraceVprintfExA
TraceDeregisterW

user32

CharNextW
LoadStringW
wsprintfA
wsprintfW

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 222KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51ac856b9da3bb01184609998fa33f8b

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

msvcp60

iassvcs

advapi32

kernel32

netapi32

ole32

rtutils

user32

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 46KB - Virtual size: 45KB

.data Size: 222KB - Virtual size: 227KB

.bss Size: - Virtual size: 37KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 46KB - Virtual size: 45KB

.data
Size: 222KB - Virtual size: 227KB

.bss
Size: - Virtual size: 37KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 5KB - Virtual size: 4KB