09bd995e080c08fd465260792d64a88e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

09bd995e080c08fd465260792d64a88e_JaffaCakes118
Size

455KB
MD5

09bd995e080c08fd465260792d64a88e
SHA1

d63261d78aae8c40628dc660cc05b9b0a27bb585
SHA256

708ec71838aad07ff12983ed519fdd4ea6d84891035ab9ecc410218b7092c7e7
SHA512

8f5170be02511f508c37afc1a92dfd8eb638c6e1c380c1c1e6c925b982aa682518f01dc8ab18ee5d7038ba3c01e7eb06d7eb1bbcdb034e38aa2627aaf735e0b9
SSDEEP

6144:lr8lYFPR4IHLDxv1BFwjAxruE2zfOEn8NEoflNyx1k0F9h4SkSPNJfLC8MoU:lAjIHfxvrycAaEn8aAL6jFLjkr8Mf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09bd995e080c08fd465260792d64a88e_JaffaCakes118

Files

09bd995e080c08fd465260792d64a88e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

94edcacea6b988baea6704f4fb31f411

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessPriorityBoost
GetShortPathNameW
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameW
GetTickCount
GetUserDefaultUILanguage
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadResource
LocalAlloc
LocalReAlloc
LockResource
MoveFileExW
OutputDebugStringA
GetLocaleInfoA
RaiseException
ReadConsoleOutputW
RemoveDirectoryW
SearchPathW
SetCurrentDirectoryW
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadLocale
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleOutputW
WriteConsoleW
WriteFile
_lwrite
lstrcmpW
lstrcmpiW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentDirectoryW
GetConsoleScreenBufferInfo
GetConsoleOutputCP
CloseHandle
GetConsoleMode
GetCommandLineW
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FreeConsole
FlushFileBuffers
FindResourceW
FindResourceExW
FindNextFileW
FindClose
FillConsoleOutputCharacterW
ExitProcess
DeviceIoControl
DeleteTimerQueueTimer
CreateThread
CreateMutexW
CreateFileMappingW
CreateFileA
CreateEventW
CreateDirectoryW
CopyFileW
QueryPerformanceCounter

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

advapi32

GetLengthSid
AllocateAndInitializeSid
CloseServiceHandle
ControlService
CryptSetProvParam
DeleteService
EqualSid
FreeSid
GetTokenInformation
StartServiceW
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegOpenUserClassesRoot
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
OpenServiceW
OpenSCManagerW
OpenProcessToken
LsaStorePrivateData
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAce

setupapi

SetupCloseInfFile
SetupCommitFileQueueW
SetupCopyOEMInfW
SetupDefaultQueueCallbackW
SetupDiBuildDriverInfoList
SetupDiClassNameFromGuidW
SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetActualSectionToInstallW
SetupDiGetClassDevsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiOpenClassRegKey
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetSelectedDevice
SetupFindFirstLineW
SetupFindNextMatchLineW
SetupGetFieldCount
SetupGetIntField
SetupGetLineCountW
SetupGetStringFieldW
SetupGetTargetPathW
SetupInitDefaultQueueCallbackEx
SetupInstallFilesFromInfSectionW
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionW
SetupOpenAppendInfFileW
SetupOpenFileQueue
SetupOpenInfFileW
SetupPromptReboot
SetupQueueCopyIndirectW
SetupQueueCopyW
SetupTermDefaultQueueCallback
SetupCloseFileQueue
CM_Setup_DevNode
CM_Query_And_Remove_SubTreeW
CM_Locate_DevNodeW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Device_IDW
CM_Get_DevNode_Status
CMP_WaitNoPendingInstallEvents

gdi32

GetTextMetricsW
GetObjectW
GetDeviceCaps
EndDoc
DeleteObject
DeleteDC
CreateCompatibleDC
PolylineTo
SelectObject
SetLayout
StartDocW
CreateCompatibleBitmap

user32

AllowSetForegroundWindow
CallWindowProcW
CharLowerW
CreateIconIndirect
CreateWindowExW
DefWindowProcW
DestroyCaret
DestroyIcon
DestroyWindow
DragObject
DrawTextExW
EndDialog
GetDC
GetDlgItem
GetIconInfo
GetParent
GetSysColor
GetSystemMetrics
GetUserObjectInformationW
GetWindowLongW
HiliteMenuItem
InvalidateRect
IsDlgButtonChecked
LoadBitmapW
LoadIconW
MessageBoxW
PostMessageW
RegisterClassExW
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetMenuDefaultItem
SetScrollRange
SetWindowLongW
SetWindowTextW
ShowWindow
SystemParametersInfoW
UnloadKeyboardLayout
UnregisterClassA

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

Exports

Exports

Number_Coerce
Number_Xor
SetAttrString
State_Next
destroy_info_struct
destroy_struct_2
get_header_ver
get_sRGB
set_sBIT

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94edcacea6b988baea6704f4fb31f411

Headers

File Characteristics

Imports

kernel32

version

advapi32

setupapi

gdi32

user32

shell32

Exports

Exports

Sections

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 217KB - Virtual size: 217KB

.data Size: 107KB - Virtual size: 107KB

.rsrc Size: 34KB - Virtual size: 34KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 217KB - Virtual size: 217KB

.data
Size: 107KB - Virtual size: 107KB

.rsrc
Size: 34KB - Virtual size: 34KB

.reloc
Size: 4KB - Virtual size: 3KB