110028417270a24423ac27d4e93e626a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

110028417270a24423ac27d4e93e626a_JaffaCakes118
Size

64KB
MD5

110028417270a24423ac27d4e93e626a
SHA1

389026fd169315d1f55e0b3c627f5945a96f909c
SHA256

47225db0ff5898fb4568b3656fe60802786d65583368addf6b531ddd21137f47
SHA512

1011e525593093e4eca331e8c64311bf852e3da4697ad21c5809bdb7debfeebc09eff0960d7b9fc283e96ec38f32b8c0cf2987d43fe199260916a183eee135dc
SSDEEP

1536:WT6jtR0Nht0oXO7Ng4vKtS7yUAkVLgqCslLYn44oJrnABk:WAtRkh6j7N6UAhqCsa44oJrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
110028417270a24423ac27d4e93e626a_JaffaCakes118

Files

110028417270a24423ac27d4e93e626a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

957592e36158d5cf8a4a83132c010e87

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WaitForMultipleObjects
CreateFileMappingW
VirtualQueryEx
InterlockedExchange
GetFileType
QueryPerformanceCounter
UnmapViewOfFile
LockResource
GetStdHandle
GetComputerNameW
GetFileSize
FreeEnvironmentStringsW
GetCurrentThread
UnhandledExceptionFilter
GetProfileIntA
GetThreadLocale
GlobalReAlloc
RaiseException
FileTimeToDosDateTime
GlobalAlloc
GetLocalTime
DeleteFileA
TerminateProcess
SetCurrentDirectoryA
ExitProcess
EnterCriticalSection
SetCurrentDirectoryW
FreeEnvironmentStringsA
FileTimeToLocalFileTime
IsBadReadPtr
GetVersionExA
FreeLibrary
SetFileTime
MapViewOfFile
GetModuleHandleA
LeaveCriticalSection
MulDiv
HeapSize
GetSystemDefaultLCID
GetTimeFormatA
lstrlenW

iser32

DrawEdge
SetCaretPos
DestroyCaret
SetClassLongA
EndPaint
CreateWindowExW
IsWindowUnicode
GetUpdateRgn
ValidateRect
PeekMessageA
DestroyIcon
SetFocus
EnumDisplaySettingsA
FindWindowA
SetWindowLongW
RegisterClassExW
PtInRect
SetActiveWindow
GetCapture
GetParent
GetMenu
CreateWindowExA
IsWindow
WinHelpW
CreateDialogIndirectParamA
CreateMenu
CopyRect
GetSysColorBrush
SetWindowLongA
ChangeDisplaySettingsExA
LoadIconA
DefMDIChildProcW
RegisterClassW
SetCursor
IsDialogMessageW
GetKeyboardLayout
GetUpdateRect
EnableWindow
SetRectEmpty
IsWindowVisible
MapWindowPoints

esenisrv

_FEps
_Strxfrm
_LDscale
_LNan
_LRteps
_Snan
_Sinh
_LEps

gdi32

GetTextExtentPoint32A
UnrealizeObject
CreatePen
GetObjectType
SetBkMode
SetStretchBltMode
CreateDIBitmap
CombineRgn
SetMapMode
Rectangle
ExtTextOutA
DPtoLP
GetCurrentObject
StretchDIBits
CreateCompatibleBitmap
GetViewportOrgEx
GdiSetBatchLimit
PlayMetaFileRecord

ole32

CoRegisterMessageFilter
CLSIDFromProgID
ReleaseStgMedium
OleQueryCreateFromData
OleTranslateAccelerator
CreateDataAdviseHolder
CreateItemMoniker
CreateOleAdviseHolder
OleRegEnumVerbs
CreateStreamOnHGlobal

advapi32

RegOpenKeyExW
RegCloseKey

Exports

Exports

ConvertSidToU2Trustee
ConvertSidToString
BuildADsPathFromParent
BuildADsParentPathFromObjectInfo
FreeADsStr
CreateProcessNotify
DllClientCleanup
FreeObjectInfo
GetDefaultServer
BuildADsPathFromLDAPPath
ApphelpUpdateCacheEntry
cmmodate
DllClientStartup
ConvertU2TrusteeToSid
BuildLDAPPathFromADsPath
FreeADsMem
GetDisplayName
AllocADsMem
BerBvFree
GetLDAPTypeName
AllocADsStr
GetDomainDNSNameForDomain
FindEntryInSearchTable
ChangeSeparator
FindSearchTableIndex
Component
AdsTypeToLdapTypeCopyGeneralizedTime
SdbCloseApphelpInformation
AdsTypeToLdapTypeCopyTime
GetPermLayers
BuildADsParentPath

Sections

.text
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

957592e36158d5cf8a4a83132c010e87

Headers

File Characteristics

Imports

kernel32

iser32

esenisrv

gdi32

ole32

advapi32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 57KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB