d742da282809113db7bd6d95c2293a69_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d742da282809113db7bd6d95c2293a69_JaffaCakes118
Size

265KB
MD5

d742da282809113db7bd6d95c2293a69
SHA1

2b0f6d8499120a59addd89839fde3bb3757175c3
SHA256

2d76b01736e4772c9ef4219145cd0dcf63dd9c4910441b80cabaf42bc3957687
SHA512

c087ae179d353cbd9ec819e324b3bf54b35ca1a70d9183016271887dfe742ca0e3d8c86ea863ac231b10e8ce2ff447391b65930552b3e8ea3398f03a2a1cadec
SSDEEP

6144:rszrIP3acuC5Cydti9Pet80gUTpVNBMVM4l4SzPiYx:4zcPTuCYZ9zDUpVNBMVM4piYx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d742da282809113db7bd6d95c2293a69_JaffaCakes118

Files

d742da282809113db7bd6d95c2293a69_JaffaCakes118
.dll windows:1 windows x86 arch:x86

91df03e9f6e2454cdc05a39a8591cd18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BeginUpdateResourceA
CreateEventW
CreateFileMappingA
CreateSemaphoreW
DosDateTimeToFileTime
EnumResourceLanguagesA
ExitProcess
FlushFileBuffers
FoldStringW
GetCommMask
GetCommState
GetConsoleAliasExesA
GetConsoleScreenBufferInfo
GetFileSize
GetFileType
GetHandleInformation
GetModuleFileNameA
GetTempPathA
GetTickCount
GlobalAddAtomW
GlobalFindAtomW
InterlockedCompareExchange
LocalShrink
LockFile
QueueUserAPC
RtlFillMemory
RtlMoveMemory
RtlZeroMemory
SetConsoleIcon
SetHandleInformation
SetLocaleInfoA
SetMailslotInfo
SetStdHandle
Sleep
VirtualAlloc
VirtualProtect
_hread
lstrcmpA
lstrcmpiA

user32

AdjustWindowRect
CallNextHookEx
CascadeChildWindows
CopyAcceleratorTableA
CreateIconFromResource
CreateMDIWindowA
DdeAccessData
DdeGetData
DdeInitializeA
DdeUnaccessData
DialogBoxIndirectParamA
DlgDirSelectExW
DrawIcon
EnumDisplaySettingsW
GetCapture
GetClassInfoExA
GetClassInfoExW
GetClassWord
GetForegroundWindow
GetListBoxInfo
GetUserObjectInformationA
GetWindowTextA
InsertMenuA
InsertMenuW
LoadCursorA
LookupIconIdFromDirectory
MessageBoxA
MessageBoxW
SendDlgItemMessageA
SetClipboardData
SetDlgItemTextW
SetMenu
SetMenuItemInfoW
SetSystemCursor
ShowCursor
ToAscii

gdi32

CreatePolyPolygonRgn
DeviceCapabilitiesExA
FrameRgn
GdiComment
GetBrushOrgEx
GetClipBox
GetClipRgn
GetColorSpace
GetMetaFileA
GetMetaFileBitsEx
GetNearestColor
GetPaletteEntries
GetPath
GetPixel
GetPixelFormat
GetTextFaceA
GetTextFaceW
GetTextMetricsA
GetViewportOrgEx
MaskBlt
OffsetWindowOrgEx
SetArcDirection
SetBitmapBits
SetMetaFileBitsEx
SetPixelFormat
SetRectRgn
SetTextColor
StretchBlt
WidenPath
gdiPlaySpoolStream

shell32

SHGetDesktopFolder
SHGetPathFromIDListA
SHGetPathFromIDListW
ShellExecuteExW

advapi32

AbortSystemShutdownW
BuildSecurityDescriptorA
CancelOverlappedAccess
ElfReportEventA
GetExplicitEntriesFromAclA
GetOldestEventLogRecord
GetServiceDisplayNameA
LsaQueryDomainInformationPolicy
LsaQueryInformationPolicy
NotifyBootConfigStatus
PrivilegeCheck
QueryServiceLockStatusW
RegEnumKeyA
RegFlushKey
RegOverridePredefKey
SetAclInformation
TrusteeAccessToObjectA

msvcrt

_execvpe
_getsystime
_wchmod
_wexecle
_wexecv
_wgetenv
_wopen
_wsearchenv
fprintf
iswascii
putwc
strtok
toupper
wcsncat

Exports

Exports

BIklvh
BrvkQpd
CKyWsfHWpcQ
CwUsRUz
CyVplUig
DiNcjpPfaexoX
ERtcpc
FRvIOelvjpKIvx
FTirdZqgfh
LGidwMnt
NekfssNKuPdH
PqQzldksdaiFUf
PrrSpfVX
QvuLYFqHQdp
SnziuU
ToTrGLMbSao
URneiYAvy
VZpFHuxNdHk
ValdIo
VbtVnzp
YJjmujyH
Ynftxejbtdyvz
ZCRXztjVnbzAGE
ZdSjcuZfaabXzt
ZrmvucI

Sections

.text
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddata
Size: 65KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 34KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ydata
Size: 145KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91df03e9f6e2454cdc05a39a8591cd18

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 11KB

.data Size: 5KB - Virtual size: 211KB

.ddata Size: 1024B - Virtual size: 571B

.ddata Size: 65KB - Virtual size: 133KB

.xdata Size: 34KB - Virtual size: 102KB

.ydata Size: 145KB - Virtual size: 214KB

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 11KB

.data
Size: 5KB - Virtual size: 211KB

.ddata
Size: 1024B - Virtual size: 571B

.ddata
Size: 65KB - Virtual size: 133KB

.xdata
Size: 34KB - Virtual size: 102KB

.ydata
Size: 145KB - Virtual size: 214KB

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 2KB - Virtual size: 1KB