d661648f2cc07c588ec7151b5eea882e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d661648f2cc07c588ec7151b5eea882e_JaffaCakes118
Size

567KB
MD5

d661648f2cc07c588ec7151b5eea882e
SHA1

18de6d930547e583d02ab773e6b14775cc594720
SHA256

4c23ba716e569c9a743871de9ab34188811a92eb15ca760e4ba9a75946cd0dec
SHA512

5346b28c88e09fc86ad937fa2243fce0017c47b973beb6c4c645448568da46baa86ace8f7edf82367a8b0b067e605ee07c9607c32a9638f3989f062cc58fa32e
SSDEEP

6144:RIfvd70UsAHt2x7+hGyxaLUqPoKMdAzJ0OGYBc0Jyz0GZ/iXhXcjYOl+FCRlq5eE:4dlsAHIxZUq30OZQB4Xcsr6B6p3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d661648f2cc07c588ec7151b5eea882e_JaffaCakes118

Files

d661648f2cc07c588ec7151b5eea882e_JaffaCakes118
.dll windows:5 windows x86 arch:x86

cdb0c0561f4a1b10304eb0a36d0bb65b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

KillTimer
EndDialog
SetTimer
ShowWindow
DialogBoxParamA
MessageBoxA
LoadIconA
PostMessageA
GetSysColor
SendDlgItemMessageA
GetWindowRect
GetSystemMetrics
MoveWindow
SetWindowTextA
SetDlgItemTextA
GetDlgItem
GetDlgItemTextA

gdi32

CreateBrushIndirect
GetObjectA
CreateFontIndirectA
DeleteObject
SetTextColor
SetBkColor

crypt32

CertCreateCertificateContext
CertGetNameStringA
CertFreeCertificateContext

winscard

SCardGetAttrib
SCardDisconnect
SCardConnectA
SCardListReadersA
SCardFreeMemory
SCardStatusA
SCardReconnect
g_rgSCardT1Pci
g_rgSCardT0Pci
SCardBeginTransaction
SCardEndTransaction
SCardTransmit
SCardGetStatusChangeA
SCardEstablishContext
SCardReleaseContext

kernel32

CreateFileA
GetProcessHeap
ReadConsoleInputA
WriteConsoleW
SetConsoleMode
SetEndOfFile
VirtualFree
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
FreeLibrary
GetProcAddress
LoadLibraryA
GetDateFormatA
FileTimeToSystemTime
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
DeleteCriticalSection
GetTickCount
GetCurrentThreadId
GetFileType
GetStdHandle
CreateMutexA
GetVersionExA
ReleaseMutex
WaitForSingleObject
SetEvent
WaitForMultipleObjects
ResetEvent
ReleaseSemaphore
CreateEventA
CloseHandle
ExitThread
CreateThread
CreateSemaphoreA
GetLastError
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
FlushConsoleInputBuffer
HeapFree
HeapAlloc
GetCommandLineA
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
RtlUnwind
SetConsoleCtrlHandler
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualAlloc
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetModuleHandleA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
MultiByteToWideChar
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CompareStringA

Exports

Exports

C_CancelFunction
C_CloseAllSessions
C_CloseSession
C_CopyObject
C_CreateObject
C_Decrypt
C_DecryptDigestUpdate
C_DecryptFinal
C_DecryptInit
C_DecryptUpdate
C_DecryptVerifyUpdate
C_DeriveKey
C_DestroyObject
C_Digest
C_DigestEncryptUpdate
C_DigestFinal
C_DigestInit
C_DigestKey
C_DigestUpdate
C_Encrypt
C_EncryptFinal
C_EncryptInit
C_EncryptUpdate
C_Finalize
C_FindObjects
C_FindObjectsFinal
C_FindObjectsInit
C_GenerateKey
C_GenerateKeyPair
C_GenerateRandom
C_GetAttributeValue
C_GetFunctionList
C_GetFunctionStatus
C_GetInfo
C_GetMechanismInfo
C_GetMechanismList
C_GetObjectSize
C_GetOperationState
C_GetSessionInfo
C_GetSlotInfo
C_GetSlotList
C_GetTokenInfo
C_InitPIN
C_InitToken
C_Initialize
C_Login
C_Logout
C_OpenSession
C_SeedRandom
C_SetAttributeValue
C_SetOperationState
C_SetPIN
C_Sign
C_SignEncryptUpdate
C_SignFinal
C_SignInit
C_SignRecover
C_SignRecoverInit
C_SignUpdate
C_UnwrapKey
C_Verify
C_VerifyFinal
C_VerifyInit
C_VerifyRecover
C_VerifyRecoverInit
C_VerifyUpdate
C_WaitForSlotEvent
C_WrapKey

Sections

.text
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdb0c0561f4a1b10304eb0a36d0bb65b

Headers

File Characteristics

Imports

user32

gdi32

crypt32

winscard

kernel32

Exports

Exports

Sections

.text Size: 365KB - Virtual size: 365KB

.rdata Size: 103KB - Virtual size: 103KB

.data Size: 46KB - Virtual size: 256KB

.rsrc Size: 15KB - Virtual size: 15KB

.reloc Size: 36KB - Virtual size: 36KB

.text
Size: 365KB - Virtual size: 365KB

.rdata
Size: 103KB - Virtual size: 103KB

.data
Size: 46KB - Virtual size: 256KB

.rsrc
Size: 15KB - Virtual size: 15KB

.reloc
Size: 36KB - Virtual size: 36KB