0d1a8188f9f62fdc294358b123066d0e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0d1a8188f9f62fdc294358b123066d0e_JaffaCakes118
Size

268KB
MD5

0d1a8188f9f62fdc294358b123066d0e
SHA1

e781db50e690317f88da0025a1227d944ec108aa
SHA256

638cdbb002057d35c5027a3ec2737fff16f37ab72169d0aab772d13125378097
SHA512

39e83bf4ed979c23260413471245e65f0f1cf804f80949fbefa56308156a63f561fdfb298f829ca51dbda94e69d7109e815e22743b8a84716291d298c48fd18d
SSDEEP

6144:4Y3NpNyOBt0j7dAJWi/P1/gsZxjGSezzPvhm5m2msOtZz+9:40ryfy2sZASKjCmRI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d1a8188f9f62fdc294358b123066d0e_JaffaCakes118

Files

0d1a8188f9f62fdc294358b123066d0e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2b82100748fcf16c80b77bd17ec12ebc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FileTimeToSystemTime
FindClose
FindFirstFileA
FlushConsoleInputBuffer
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetOverlappedResult
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetUserDefaultLangID
GetVersion
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapCreate
FileTimeToLocalFileTime
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
OpenEventA
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleInputA
ReadFile
RemoveDirectoryA
ResetEvent
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiA
ExitProcess
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryA
CompareStringW
CompareStringA
CompareFileTime
HeapDestroy
CloseHandle

ws2_32

getservbyname
getsockopt
connect
closesocket
WSAStartup
WSASetLastError
WSAGetLastError
htonl
htons
ioctlsocket
ntohs
recv
select
socket
shutdown
setsockopt
gethostbyname
send

shlwapi

PathCombineA

ole32

CoCreateGuid

advapi32

AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetKeySecurity
RegSetValueExA
RegisterEventSourceA
ReportEventA
SetSecurityDescriptorDacl
DeregisterEventSource

user32

GetWindowThreadProcessId
GetWindowLongA
IsIconic
MessageBoxA
wsprintfA
ShowWindow
GetUserObjectInformationW
GetSystemMetrics
GetProcessWindowStation
GetDesktopWindow
EnumWindows
CloseWindow
MessageBoxW

Exports

Exports

BindTexture2D
CreateImagePropBuffer
DVDMRWVRFinalizeDisc
EnumBaseImageDataPropertyRelease
EnumBaseImageDataPropertyReset
EnumFlashSettingNext
EnumItemRelease
EnumMCCustomSetNumberNext
EnumRelCamSettingDataReset
GetFunctions_i
GetImageItemProperty
GetNumHarddisks
GetRAWDevelopFaculties
ImportDataTrack
IsSupportParamValue
Malloc
MallocHost
MemcpyFromSymbol
Memset3D
SetDoubleForHost
WriteDevParamToRAW

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b82100748fcf16c80b77bd17ec12ebc

Headers

File Characteristics

Imports

kernel32

ws2_32

shlwapi

ole32

advapi32

user32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.data Size: 96KB - Virtual size: 120KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 160KB

.data
Size: 96KB - Virtual size: 120KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB