f0a372531390160edf397b3e7fe2add4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f0a372531390160edf397b3e7fe2add4_JaffaCakes118
Size

184KB
MD5

f0a372531390160edf397b3e7fe2add4
SHA1

d267195307ea0128a04ebd1516c48714a2ca5004
SHA256

3e45df015a2ee9334f52cc112a14f4196a356fa647a3c9cffbf663ed2c54d2a2
SHA512

5ea1f321a8051524661e98d035450d95ef38b4049a086abfc26f69fb5a2f7343e9f078973d3f77e7bb3e9a5bd445cb2fb79c3ccc4919bbf17be19d9faf0ce28d
SSDEEP

3072:mv0S2zJELFu7Qo4HoqnOHkpvGLe11PH42CjktC6:ms7JOFu7541OHsn1QxjktC6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0a372531390160edf397b3e7fe2add4_JaffaCakes118

Files

f0a372531390160edf397b3e7fe2add4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

23dfa8f82740d3d72fb75db415abb247

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindNextFileA
lstrcatA
lstrcpyA
FindFirstFileA
lstrlenA
LocalFree
LocalAlloc
GetVersion
TerminateProcess
OpenProcess
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpynA
GetLastError
SetLastError
Sleep
Process32Next
Module32Next
Thread32Next
Thread32First
Module32First
Process32First
CreateToolhelp32Snapshot
DeleteFileA
MultiByteToWideChar
CompareStringW
CompareStringA
FindClose
CopyFileA
GetFileAttributesA
SetFileAttributesA
GetWindowsDirectoryA
GetFullPathNameA
GetVersionExA
SetEndOfFile
GetStringTypeW
GetStringTypeA
SetFilePointer
GetTimeZoneInformation
CreateFileA
FlushFileBuffers
SetStdHandle
RtlUnwind
HeapReAlloc
VirtualAlloc
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
HeapFree
InitializeCriticalSection
ReadFile
DeleteCriticalSection
ExitProcess
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetEnvironmentVariableA

user32

PostThreadMessageA
wsprintfA

advapi32

RegSetValueExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueExA

ole32

CoCreateInstance
CoInitialize

setupapi

SetupOpenInfFileA
SetupFindFirstLineA
SetupGetLineTextA
SetupFindNextLine
SetupCloseInfFile
SetupDiGetINFClassA
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoA
SetupDiSetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupCopyOEMInfA

Exports

Exports

AddDriverPath
DeleteCCSFiles
DeleteOemInfFile
DriverUpdate
EnumerateDevice
FindExistingDevice
GetOS
GetProcessID
InstallDriver
InstallDrvFiles
InstallResourceFiles
IsModuleLoaded
KillProcess
M_RemoveRTShortCut
RemoveDevice
TurnSigningOff
TurnSigningOn
WaitForInstallEnd

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23dfa8f82740d3d72fb75db415abb247

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

setupapi

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 100KB - Virtual size: 98KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 100KB - Virtual size: 98KB

.reloc
Size: 8KB - Virtual size: 4KB