37e6c3fb44a99aa6a1e1d2586ab9601a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

37e6c3fb44a99aa6a1e1d2586ab9601a_JaffaCakes118
Size

45KB
MD5

37e6c3fb44a99aa6a1e1d2586ab9601a
SHA1

9ff19a86899cce4b64e81fa66584cb1e7a1ebd93
SHA256

c8604a112e5831b89e78da7c7bcc52dd24e9e52cfe4e9a0e4c82da24d93251a1
SHA512

36dc7c02a61bc7560832ffd9f160cdb539c5f3402616e1e9f874b1244d2bdc028e71cc8c22942e7740d47778ad516898ff8ad07879642c6591773f6c7a1ee6e7
SSDEEP

768://5k1Q4GeqK59jFFjOE3C+b3IurbwRoTLxp/4lYbC2Uqbxt8l3:5k1Q4GtK59X9Iu3waTLxp/4lY3n8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37e6c3fb44a99aa6a1e1d2586ab9601a_JaffaCakes118

Files

37e6c3fb44a99aa6a1e1d2586ab9601a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bf6cc03480244a6bdae726c883053040

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfcsubs

?GetAt@CString@@QBEGH@Z
?CopyBeforeWrite@CString@@IAEXXZ
??0CString@@QAE@ABV0@@Z
?GetHashTableSize@CMapStringToPtr@@QBEIXZ
?Lookup@CMapStringToPtr@@QBEHPBGAAPAX@Z
?FormatV@CString@@IAEXPBGPAD@Z
??H@YG?AVCString@@PBGABV0@@Z
?GetCount@CMapStringToPtr@@QBEHXZ
??N@YG_NABVCString@@0@Z
?Create@CPlex@@SGPAU1@AAPAU1@II@Z
?LockBuffer@CString@@QAEPAGXZ
?ReverseFind@CString@@QBEHG@Z
?Mid@CString@@QBE?AV1@H@Z
?GetStartPosition@CMapStringToPtr@@QBEPAU__POSITION@@XZ
?Empty@CString@@QAEXXZ
?GetUpperBound@CStringArray@@QBEHXZ
?Find@CString@@QBEHG@Z
?Find@CString@@QBEHPBG@Z
?Release@CString@@KGXPAUCStringData@@@Z

msdart

?_CurrentThreadId@CSpinLock@@CGJXZ
?_Clear@CLKRLinearHashTable@@AAEX_N@Z
?sm_pfnTryEnterCriticalSection@CCriticalSection@@0P6GHPAU_RTL_CRITICAL_SECTION@@@ZA
?Size@CLKRHashTable@@QBEKXZ
??0CSpinLock@@QAE@XZ
?SetTableLockSpinCount@CLKRLinearHashTable@@QAEXG@Z
?IsWriteLocked@CFakeLock@@QBE_NXZ
?IsWriteUnlocked@CReaderWriterLock@@QBE_NXZ
?IsReadUnlocked@CReaderWriterLock2@@QBE_NXZ
?ConvertExclusiveToShared@CReaderWriterLock@@QAEXXZ
?IsWriteLocked@CSpinLock@@QBE_NXZ
?ConvertSharedToExclusive@CCritSec@@QAEXXZ
??4CLockedDoubleList@@QAEAAV0@ABV0@@Z
?IsReadLocked@CLKRLinearHashTable@@QBE_NXZ
?_IsLocked@CSpinLock@@ABE_NXZ
?RemoveHead@CLockedDoubleList@@QAEQAVCListEntry@@XZ
MpHeapReAlloc

kernel32

GetPrivateProfileIntA
IsBadStringPtrA
BuildCommDCBAndTimeoutsW
CreateFileA
SetMessageWaitingIndicator
ZombifyActCtx
QueryMemoryResourceNotification
GetWindowsDirectoryA
GetCurrentThread
RaiseException
BaseFlushAppcompatCache
GetConsoleTitleW
IsDBCSLeadByteEx
BackupSeek
AttachConsole
DeactivateActCtx
FindFirstVolumeMountPointA
DefineDosDeviceA
AddAtomA
ReadConsoleInputExW
LockFile
GetModuleHandleW
BuildCommDCBW
GetConsoleAliasW
SetDefaultCommConfigA
GetLocaleInfoA
FreeEnvironmentStringsW
ResumeThread
GetConsoleInputExeNameW
InitializeCriticalSectionAndSpinCount
SetHandleContext
EnumDateFormatsExA
HeapDestroy
GetVolumePathNamesForVolumeNameA
MulDiv
LoadLibraryW
GetProfileSectionW
WritePrivateProfileStructA
SetEnvironmentVariableA
GetVolumePathNameW
TransmitCommChar
HeapCreate
GetCalendarInfoA
CreateDirectoryExW

rasapi32

RasSetAutodialEnableA
RasSetAutodialAddressW
RasSetAutodialEnableW
RasEnumEntriesW
RasGetSubEntryHandleW
RasDialA
RasGetEapUserIdentityW
RasEnumConnectionsW

msports

PortsClassInstaller
ComDBResizeDatabase
SerialPortPropPageProvider
ComDBReleasePort
SerialDisplayAdvancedSettings
ComDBGetCurrentPortUsage
ComDBClaimNextFreePort
ParallelPortPropPageProvider
ComDBClaimPort
ComDBClose
ComDBOpen

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf6cc03480244a6bdae726c883053040

Headers

DLL Characteristics

File Characteristics

Imports

mfcsubs

msdart

kernel32

rasapi32

msports

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 8KB - Virtual size: 7KB