0d7b09615c63f3893876cbe055ce161d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d7b09615c63f3893876cbe055ce161d_JaffaCakes118
Size

112KB
MD5

0d7b09615c63f3893876cbe055ce161d
SHA1

81a233f4921e2f9c4d5a0148c958ff01197f3eb5
SHA256

74d73eae5015ae93412ac89d1adc22486fa294b50302a26a088e0844379154f0
SHA512

2a5cb617b87b4295749f28a6afccf224d14c35369a95c2464685409f315cb3a494439f830e66e42cfdf12e0752427c25f9402e90b3c327766e6a7eee3a4cabef
SSDEEP

3072:ffN6j20HxdfGfDojikddUGyQKENcfZQmP8o:flO2IdrdmUUQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d7b09615c63f3893876cbe055ce161d_JaffaCakes118

Files

0d7b09615c63f3893876cbe055ce161d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e53010cf451899b0aaea306a7d9b3cd6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalShrink
MulDiv
OpenJobObjectW
ReadFile
HeapFree
SetEnvironmentVariableA
TlsGetValue
TryEnterCriticalSection
WaitForMultipleObjectsEx
HeapCreate
HeapAlloc
GlobalAlloc
GetVersionExA
GetTimeZoneInformation
GetTempPathW
GetSystemInfo
GetStringTypeExW
GetModuleHandleA
GetLogicalDriveStringsW
GetFileAttributesExA
GetExitCodeProcess
GetConsoleOutputCP
GetCommandLineA
ExitProcess
EraseTape
EndUpdateResourceA
DuplicateHandle
DeleteCriticalSection
CloseHandle
RemoveDirectoryW
BeginUpdateResourceA

ole32

CoUninitialize
CoFreeUnusedLibraries
IsEqualGUID

winmm

midiOutCacheDrumPatches
mmioDescend
mxd32Message
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveInReset
waveInStop
joyGetPos
waveOutUnprepareHeader
waveOutPrepareHeader

ws2_32

WSAGetLastError
WSAStringToAddressA
WSAUnhookBlockingHook
send
socket
connect
closesocket
WSAWaitForMultipleEvents
listen

dinput

DirectInputCreateW

user32

TranslateMessage
AdjustWindowRect
CharLowerBuffA
CharToOemA
CheckMenuItem
ClientToScreen
DefWindowProcA
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageA
DrawFrame
EmptyClipboard
EnumDisplayMonitors
EnumWindowStationsA
GetForegroundWindow
GetTitleBarInfo
IsWindowEnabled
LoadIconA
MessageBeep
MessageBoxW
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageA
RegisterShellHookWindow
RegisterWindowMessageA
UpdateWindow
UpdateLayeredWindow

version

VerQueryValueA
GetFileVersionInfoA

shell32

ShellExecuteA
SHGetSpecialFolderPathW
SHFileOperationW

advapi32

SetSecurityDescriptorDacl
AddAccessDeniedAce
CryptEncrypt
EqualSid
FileEncryptionStatusW
GetAce
GetAclInformation
GetLengthSid
GetTrusteeNameW
InitializeSecurityDescriptor
LsaClearAuditLog
LsaSetSecret
OpenProcessToken
OpenServiceA
QueryServiceConfig2A
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
SystemFunction013

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e53010cf451899b0aaea306a7d9b3cd6

Headers

File Characteristics

Imports

kernel32

ole32

winmm

ws2_32

dinput

user32

version

shell32

advapi32

Sections

.text Size: 72KB - Virtual size: 71KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 72KB - Virtual size: 71KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB