e13f43d70b0d9c3b9e5460b866370d66_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e13f43d70b0d9c3b9e5460b866370d66_JaffaCakes118
Size

35KB
MD5

e13f43d70b0d9c3b9e5460b866370d66
SHA1

daeb82e1ec02a87598d61365bb51f63d3b06453a
SHA256

e01a1a0c458119a15bb6a9b48f45f6ce7043279ac3016f504f60c90db760bbf8
SHA512

9ee828bb7f7e6e4b3523568ffa5596c44c37e87f236a5813e77c91c87b212588667feb0624225c8427f4a0635d8eb65685b9035817b7afe39acedeab20f1c87c
SSDEEP

768:/lQ8wbX7WLWfmqNLsku7IfrjzdRRS8azkfy/owttpItZYCdb:FaCWfmq1CsfTaJsZYKb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e13f43d70b0d9c3b9e5460b866370d66_JaffaCakes118

Files

e13f43d70b0d9c3b9e5460b866370d66_JaffaCakes118
.dll windows:1 windows x86 arch:x86

a520c1a13b86b9e370da86317ca5e4b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BackupRead
DefineDosDeviceW
EnumCalendarInfoW
ExitProcess
FindClose
GetCommMask
GetCommState
GetCompressedFileSizeA
GetConsoleAliasExesA
GetConsoleAliasesA
GetConsoleAliasesW
GetDefaultCommConfigA
GetFileSize
GetFileType
GetNumberFormatW
GetNumberOfConsoleMouseButtons
GetStringTypeExA
GetStringTypeExW
GlobalUnfix
Heap32First
InterlockedExchangeAdd
OpenMutexA
PeekNamedPipe
SetConsoleCP
SetCurrentDirectoryW
SetFileApisToANSI
SetNamedPipeHandleState
SetThreadAffinityMask
ShowConsoleCursor
Sleep
TlsAlloc
TransmitCommChar
VirtualProtect
WriteConsoleW
WriteFileEx
_lclose
_lopen
lstrcmpA
lstrcmpiA

user32

AttachThreadInput
BlockInput
CheckMenuItem
CloseDesktop
CreateCaret
CreateDialogParamW
DdeDisconnect
DdeUninitialize
DispatchMessageW
EndDeferWindowPos
EnumDesktopsA
EnumWindows
GetClassInfoExW
GetClassWord
GetDlgItem
GetMenuState
GetParent
GetPropA
GetTitleBarInfo
GetUserObjectInformationA
LoadAcceleratorsW
LoadCursorFromFileW
OffsetRect
PeekMessageW
PtInRect
RegisterWindowMessageA
SetFocus
SetMenuItemInfoW
SetUserObjectInformationW
ValidateRect
WindowFromPoint

gdi32

CreateFontW
DeleteEnhMetaFile
EnumFontFamiliesA
GdiComment
GetCharWidthFloatW
GetClipBox
GetClipRgn
GetColorSpace
GetCurrentObject
GetCurrentPositionEx
GetDCOrgEx
GetDeviceGammaRamp
GetLogColorSpaceW
GetPath
GetPixel
GetPixelFormat
GetTextFaceA
GetTextFaceW
PolyBezierTo
SelectObject
SetTextJustification

comdlg32

ChooseFontW

comctl32

ImageList_DragLeave

shell32

SHBrowseForFolderA
SHFileOperationW

advapi32

AccessCheck
AddAce
BuildSecurityDescriptorW
BuildTrusteeWithNameA
CryptGenKey
ElfNumberOfRecords
ElfOldestRecord
ElfReportEventW
EncryptFileW
GetCurrentHwProfileA
GetExplicitEntriesFromAclW
GetLengthSid
GetSecurityInfoExW
GetServiceKeyNameW
LsaQueryInfoTrustedDomain
RegCreateKeyW
RegLoadKeyA
RegQueryMultipleValuesW
SetServiceStatus

msvcrt

_callnewh
_chdrive
_execvp
_heapused
_outpd
_spawnvp
_strncoll
_unlock
_wenviron
_wexecle
_wexecv
_wexecvp
fopen
iswalnum
iswctype
perror
realloc
rename
strncpy
tan
towupper
ungetwc

Exports

Exports

AuIGxlp
AyBxcgPhGgCUOEd
Erhnwb
LwesimJvqycI
PuyHbAuCEQGfaai
QihpwwaANLeUjwwzg
QkjOfliofg
SnhicxHNzXm
TVfEpLeBwutDxlf
TopTOXNoehdsfhk
UjFrftmwu

Sections

.text
Size: 7KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a520c1a13b86b9e370da86317ca5e4b7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

comctl32

shell32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 83KB

.data Size: 23KB - Virtual size: 31KB

.xdata Size: 512B - Virtual size: 309B

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 83KB

.data
Size: 23KB - Virtual size: 31KB

.xdata
Size: 512B - Virtual size: 309B

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 1KB - Virtual size: 1KB