eafe6d704900b7968ed46a3a0a8c47f6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eafe6d704900b7968ed46a3a0a8c47f6_JaffaCakes118
Size

304KB
MD5

eafe6d704900b7968ed46a3a0a8c47f6
SHA1

06ec30ec5547f049469ca6776cc74d4020ab1dbe
SHA256

4827732899d591023ceda9759f51d5a1e71831d37d3ccec33c739f6c3fe8f921
SHA512

e18d59af816eab354a44bc906e428a8e2efd3dfce06c59c36ac0ab6601f47323bcd962163af9a054ef6b6a73a6bfc7761f02fe14a01acf4223211601dfac2e75
SSDEEP

6144:xWc1uNOg81T0iy9+CpqsEc6Ae6KwT5BzWCRFcz5qHnMLxSyzSF9q:x1uw2iMRmeeFwLXFclAnWTSF0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eafe6d704900b7968ed46a3a0a8c47f6_JaffaCakes118

Files

eafe6d704900b7968ed46a3a0a8c47f6_JaffaCakes118
.dll regsvr32 windows:5 windows x86 arch:x86

4109e2d9d5c91f4d4489b15f0d3eb78a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msadco.pdb

Imports

msvcrt

atoi
_stricmp
isdigit
wcsncpy
_ltow
wcsncat
wcschr
_wcsnicmp
_strnicmp
strncpy
_CxxThrowException
swprintf
tolower
_wcsicmp
wcscpy
_local_unwind2
realloc
malloc
_except_handler3
_purecall
wcslen
wcscat
wcscmp
__CxxFrameHandler
free
atol
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
strncmp
memmove
_itoa
_ltoa
time
srand
rand

kernel32

FreeLibrary
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetLastError
RaiseException
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
MultiByteToWideChar
GetCurrentThreadId
WaitForSingleObject
HeapDestroy
GlobalUnlock
GlobalLock
GetProcAddress
GlobalSize
InterlockedExchange
GetExitCodeThread
SetEvent
CreateThread
CloseHandle
InterlockedDecrement
LeaveCriticalSection
InterlockedIncrement
OpenFile
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
ReleaseDC
GetDC
TranslateMessage
GetParent
wsprintfW
DestroyWindow
SetFocus
IsWindow
InvalidateRect
GetActiveWindow
ShowCursor
GetDesktopWindow
SetCursor
ShowWindow

gdi32

SetMapMode
SetViewportOrgEx
DeleteDC
SaveDC
SetWindowOrgEx
RestoreDC
GetDeviceCaps
CreateRectRgnIndirect
LPtoDP

advapi32

RegCloseKey

rpcrt4

UuidCreate

ole32

OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
OleLoadFromStream
CoReleaseMarshalData
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CLSIDFromProgID
GetHGlobalFromStream
StringFromGUID2
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemFree
OleSaveToStream
CoGetMalloc
WriteClassStm
CreateStreamOnHGlobal

oleaut32

SysAllocStringByteLen
SysStringByteLen
VariantChangeType
LoadRegTypeLi
SetErrorInfo
CreateErrorInfo
OleCreatePropertyFrame
GetErrorInfo
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayUnlock
SafeArrayLock
SafeArrayPtrOfIndex
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
SysAllocString
SysAllocStringLen
SysStringLen
SysFreeString
VariantInit
VariantClear
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi

msdart

RegEnumValueI
UMSEnterCSWraper
MPDeleteCriticalSection
MPInitializeCriticalSection
RegOpenKeyExI
GetSystemDirectoryI
GetModuleFileNameI
_LoadVersionedResourceEx@16
GetVersionExI
CreateEventI
MessageBoxI
LoadLibraryI
GetModuleHandleI
RegDeleteKeyI
RegCreateKeyExI
CallWindowProcI
PeekMessageI
DispatchMessageI
CreateDCI
RegisterClassExI
LoadCursorI
GetClassInfoExI
CreateWindowExI
SetWindowLongPtrI
DefWindowProcI
RegEnumKeyExI
LoadStringI
RegSetValueExI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4109e2d9d5c91f4d4489b15f0d3eb78a

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

user32

gdi32

advapi32

rpcrt4

ole32

oleaut32

msdart

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 105KB

.data Size: 168KB - Virtual size: 165KB

.rsrc Size: 12KB - Virtual size: 8KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 108KB - Virtual size: 105KB

.data
Size: 168KB - Virtual size: 165KB

.rsrc
Size: 12KB - Virtual size: 8KB

.reloc
Size: 12KB - Virtual size: 9KB