0b12e50b33f0e6699acc2e11bd3906cf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b12e50b33f0e6699acc2e11bd3906cf_JaffaCakes118
Size

132KB
MD5

0b12e50b33f0e6699acc2e11bd3906cf
SHA1

d2fe36f118601a25fb240a91bba873893bf88ff2
SHA256

e520eda608179132a503ef94c1a9b7941dd13632a4950fda46f2f1342dd999c2
SHA512

2917f51533a78234e5b3b6a2b707273d15a5f551e6e2e9d26584446741990a23e9a52a279e3f8bd70201c4bfdf2cb710b70180132f58bc1e0abc24b17834d85c
SSDEEP

1536:jhCF/DkvKZFS+1fFzxYALXo8zr+0r569Xx2Bi+eMdh13QD2W8EB0I+dEDGsCpA15:jhCcK3ZZzrzrh5pBLdhNQHB0I+GGsCp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b12e50b33f0e6699acc2e11bd3906cf_JaffaCakes118

Files

0b12e50b33f0e6699acc2e11bd3906cf_JaffaCakes118
.dll windows:5 windows x86 arch:x86

79acd0205e94f54d9752575ec6fff803

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_wcsicmp
wcschr
_except_handler3
mbstowcs

ntdll

DbgPrint

advapi32

OpenServiceW
CloseServiceHandle
OpenSCManagerW

kernel32

GetComputerNameW
SetLastError
DeleteCriticalSection
LocalAlloc
InitializeCriticalSection
DisableThreadLibraryCalls
LeaveCriticalSection
TlsFree
TlsAlloc
EnterCriticalSection
TlsSetValue
TlsGetValue
LocalFree
GetLastError

rpcrt4

RpcBindingFree
I_RpcExceptionFilter
RpcBindingFromStringBindingW
RpcBindingSetAuthInfoW
RpcStringFreeW
NdrClientCall2
RpcStringBindingComposeW

ws2_32

gethostbyname
ntohl
WSACleanup
htonl
inet_ntoa
WSAStartup

dsauth

DhcpDsCleanupDS
DhcpDeleteServerDS
DhcpGetAllOptionValuesDS
DhcpEnumServersDS
DhcpAddServerDS
DhcpDsInitDS

Exports

Exports

DhcpAddMScopeElement
DhcpAddServer
DhcpAddSubnetElement
DhcpAddSubnetElementV4
DhcpAddSubnetElementV5
DhcpAuditLogGetParams
DhcpAuditLogSetParams
DhcpCreateClass
DhcpCreateClientInfo
DhcpCreateClientInfoV4
DhcpCreateOption
DhcpCreateOptionV5
DhcpCreateSubnet
DhcpDeleteClass
DhcpDeleteClientInfo
DhcpDeleteMClientInfo
DhcpDeleteMScope
DhcpDeleteServer
DhcpDeleteSubnet
DhcpDeleteSuperScopeV4
DhcpDsCleanup
DhcpDsClearHostServerEntries
DhcpDsInit
DhcpEnumClasses
DhcpEnumMScopeClients
DhcpEnumMScopeElements
DhcpEnumMScopes
DhcpEnumOptionValues
DhcpEnumOptionValuesV5
DhcpEnumOptions
DhcpEnumOptionsV5
DhcpEnumServers
DhcpEnumSubnetClients
DhcpEnumSubnetClientsV4
DhcpEnumSubnetClientsV5
DhcpEnumSubnetElements
DhcpEnumSubnetElementsV4
DhcpEnumSubnetElementsV5
DhcpEnumSubnets
DhcpGetAllOptionValues
DhcpGetAllOptions
DhcpGetClassInfo
DhcpGetClientInfo
DhcpGetClientInfoV4
DhcpGetClientOptions
DhcpGetMCastMibInfo
DhcpGetMScopeInfo
DhcpGetMibInfo
DhcpGetOptionInfo
DhcpGetOptionInfoV5
DhcpGetOptionValue
DhcpGetOptionValueV5
DhcpGetServerBindingInfo
DhcpGetSubnetInfo
DhcpGetSuperScopeInfoV4
DhcpGetThreadOptions
DhcpGetVersion
DhcpModifyClass
DhcpRemoveMScopeElement
DhcpRemoveOption
DhcpRemoveOptionV5
DhcpRemoveOptionValue
DhcpRemoveOptionValueV5
DhcpRemoveSubnetElement
DhcpRemoveSubnetElementV4
DhcpRemoveSubnetElementV5
DhcpRpcFreeMemory
DhcpScanDatabase
DhcpScanMDatabase
DhcpServerBackupDatabase
DhcpServerGetConfig
DhcpServerGetConfigV4
DhcpServerQueryAttribute
DhcpServerQueryAttributes
DhcpServerQueryDnsRegCredentials
DhcpServerRedoAuthorization
DhcpServerRestoreDatabase
DhcpServerSetConfig
DhcpServerSetConfigV4
DhcpServerSetDnsRegCredentials
DhcpSetClientInfo
DhcpSetClientInfoV4
DhcpSetMScopeInfo
DhcpSetOptionInfo
DhcpSetOptionInfoV5
DhcpSetOptionValue
DhcpSetOptionValueV5
DhcpSetOptionValues
DhcpSetOptionValuesV5
DhcpSetServerBindingInfo
DhcpSetSubnetInfo
DhcpSetSuperScopeV4
DhcpSetThreadOptions

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79acd0205e94f54d9752575ec6fff803

Headers

File Characteristics

Imports

msvcrt

ntdll

advapi32

kernel32

rpcrt4

ws2_32

dsauth

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 60KB - Virtual size: 60KB

.rsrc Size: 41KB - Virtual size: 40KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 60KB - Virtual size: 60KB

.rsrc
Size: 41KB - Virtual size: 40KB

.reloc
Size: 2KB - Virtual size: 1KB