f07997b43fb98488f05c4c8ab2d933f2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f07997b43fb98488f05c4c8ab2d933f2_JaffaCakes118
Size

145KB
MD5

f07997b43fb98488f05c4c8ab2d933f2
SHA1

0556db8c463205ee27ad87d4b51d6015f229be60
SHA256

bb7989b12d8f3ac5cd8eb693852a3085d91336d3ec160c448977ea025c4ebf33
SHA512

1f9fd82e19b5801e3392595b01f4d61f35d155779e042ba3ce89e4a40f13b1e7497bb0a5c23cabd7774b3b7047daff73db70389b6edb2dc50e85eb28bdbf389e
SSDEEP

3072:EqUMevsexF8OBgX/4+JAo245B41yVWOsuHJO4nlq96:EqUMevsexF8OBgX/4+eo245B41IWAHkr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f07997b43fb98488f05c4c8ab2d933f2_JaffaCakes118

Files

f07997b43fb98488f05c4c8ab2d933f2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

02ba6ce505d87656bbf266f50ffacd28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

inet_ntoa
WSACleanup
htonl
sendto
WSAStartup
setsockopt
send
closesocket
select
connect
gethostbyname
htons
inet_addr
socket

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

kernel32

LoadLibraryA
SetStdHandle
FlushFileBuffers
GetSystemInfo
GetModuleFileNameA
GetStringTypeW
SetEndOfFile
OutputDebugStringW
CloseHandle
Sleep
CreateThread
lstrcatW
lstrlenW
lstrlenA
lstrcpyW
GetTempPathW
GetPrivateProfileStringW
CreateFileW
DeleteFileW
SetEvent
WaitForSingleObject
CreateEventW
WideCharToMultiByte
GetTickCount
GetVersionExW
InterlockedExchange
GetACP
GetLocaleInfoA
InitializeCriticalSection
DeleteCriticalSection
HeapAlloc
VirtualProtect
HeapFree
GetProcAddress
GlobalFree
GlobalAlloc
GetCurrentProcess
TerminateProcess
GetLastError
SetFilePointer
ReadFile
CreateProcessW
GetCurrentThreadId
LoadLibraryW
MultiByteToWideChar
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW

user32

wsprintfW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
GetWindowLongW
GetClientRect
SetWindowLongW
PostQuitMessage
DefWindowProcW
TranslateMessage
DispatchMessageW
GetMessageW

advapi32

RegSetValueExW
RegOpenKeyExW
RegCloseKey

ole32

CoInitialize
CoCreateInstance
OleInitialize
CoGetClassObject
OleSetContainedObject
CoUninitialize

oleaut32

VariantClear
SysAllocString
VariantInit

Exports

Exports

GetDllModuleControlInit
StartShell

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02ba6ce505d87656bbf266f50ffacd28

Headers

File Characteristics

Imports

ws2_32

wininet

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 112KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 45KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 112KB - Virtual size: 112KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 45KB

.reloc
Size: 12KB - Virtual size: 12KB