2d7da15384d5e139af0cf04a4c1bbd3a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2d7da15384d5e139af0cf04a4c1bbd3a_JaffaCakes118
Size

52KB
MD5

2d7da15384d5e139af0cf04a4c1bbd3a
SHA1

8403a23398f0b8f7d16259f5fe3f8a1e33b026ba
SHA256

cdc69c02be654ef15e1fab44c92492fc3428cfbc2ea74db480ee90f8c314052f
SHA512

b5289f116a5a12e3f0ba3f182900ef6f03aea0acbc20fb0cfc7e7a2815e11cc61b61236971dd54600a38acdbe4130ac5eb4512331f97cadc2a30f6175e79382f
SSDEEP

768:apRhJOMlJgBx4jm2pJ2ykPdNkHNfbVvf1TSscEj3KqUvybtTM6Uknww79qEmFd67:aFJlJM6kPdNGdTSlEdUYtTM6cALmX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d7da15384d5e139af0cf04a4c1bbd3a_JaffaCakes118

Files

2d7da15384d5e139af0cf04a4c1bbd3a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ccf2e21cd992aed22c5930fb9ccb19ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
HeapAlloc
Process32Next
lstrcmpiA
Process32First
WriteFile
WideCharToMultiByte
MultiByteToWideChar
lstrcatA
GetTickCount
FindClose
FindFirstFileA
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
lstrlenA
VirtualProtect
GetTempPathA
GetWindowsDirectoryA
ReleaseMutex
GetLastError
CreateMutexA
CreateToolhelp32Snapshot
GetSystemDirectoryA
GetFileAttributesA
MoveFileExA
DeleteFileA
lstrcpynA
ReadProcessMemory
SetThreadPriority
VirtualProtectEx
CopyFileA
DeviceIoControl
TerminateThread
GlobalAlloc
GlobalFree
SetEndOfFile
VirtualAlloc
VirtualFree
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
AddVectoredExceptionHandler
CreateFileA
ReadFile
SetFilePointer
CloseHandle
GetFileSize
LoadLibraryA
GetProcAddress
Thread32First
GetCurrentProcessId
OpenThread
GetThreadContext
SetThreadContext
Thread32Next
GetCurrentProcess
FreeLibrary
FlushInstructionCache
IsBadReadPtr
CreateThread
GetModuleHandleA
GetModuleFileNameA
OpenProcess
Sleep

user32

GetWindow
GetClassNameW
GetWindowTextA
GetForegroundWindow
PostMessageA
wsprintfA
FindWindowA

gdi32

GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDCA

advapi32

CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CryptCreateHash

msvcrt

_onexit
__dllonexit
srand
_strcmpi
_strupr
_strdup
memset
strlen
??2@YAPAXI@Z
_stricmp
memcpy
strcpy
strncpy
isprint
memcmp
strstr
strcat
strrchr
free
malloc
??3@YAXPAX@Z
_except_handler3
_strlwr
wcscat
wcscpy
wcslen
sprintf
isspace
strchr
_vsnprintf
realloc
isdigit
isalpha
atoi
wcscmp
mbstowcs
wcsncat
wcsstr
exit
rand

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

wsock32

WSAStartup
socket
htons
connect
recv
gethostbyname
send
shutdown
closesocket

psapi

GetModuleFileNameExA
EnumProcessModules

gdiplus

GdiplusStartup
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipDisposeImage
GdipCreateBitmapFromHBITMAP

Exports

Exports

pfjaoidjglkajd

Sections

.bss
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccf2e21cd992aed22c5930fb9ccb19ef

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

msvcp60

wsock32

psapi

gdiplus

Exports

Exports

Sections

.bss Size: - Virtual size: 11KB

.data Size: 48KB - Virtual size: 47KB

.CRT Size: 512B - Virtual size: 8B

.reloc Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 11KB

.data
Size: 48KB - Virtual size: 47KB

.CRT
Size: 512B - Virtual size: 8B

.reloc
Size: 3KB - Virtual size: 2KB