3801dcae1a05d216cb9e492facd9c153_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3801dcae1a05d216cb9e492facd9c153_JaffaCakes118
Size

127KB
MD5

3801dcae1a05d216cb9e492facd9c153
SHA1

55988af551388957233a4d5669de075b505b9ab2
SHA256

5ea56029209b88db9bf0cbc7293b3bdd9144d5583484ecc3697aa7a1d3eedc50
SHA512

5772410ea59ecaedacacdddbe90ebc063e29e5468bf412e0855908faa7e26fba8b61a7cf62c7e7bd1bcdd486745ccd40b9444df49b6a869432a2a45290542c30
SSDEEP

3072:xhr6i0OI7cG5ylX2KgFf/CFJu52Xc3WGSo+1eNy9P/w:xhriOIhQt2f/au52XuWR6qP4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3801dcae1a05d216cb9e492facd9c153_JaffaCakes118

Files

3801dcae1a05d216cb9e492facd9c153_JaffaCakes118
.dll windows:1 windows x86 arch:x86

ae40d48742fda2b8d5bbf829cfa5f579

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetClipboardData
CloseClipboard
CharLowerA
SetClipboardData
OpenClipboard
LoadStringA

kernel32

GetWindowsDirectoryA
GlobalUnlock
GlobalLock
GetModuleFileNameA
GlobalFree
GlobalAlloc
lstrlenA
lstrcmpA
lstrcmpiA
GlobalReAlloc
GetVersionExA
LoadResource
FindResourceA
LockResource
FreeResource
GlobalSize
GlobalFlags
lstrcpyA
GlobalHandle
lstrcatA
FreeLibrary
LoadLibraryA
GetProfileStringA
ReadFile
SetFilePointer
WriteFile
CloseHandle
CreateFileA
GetTempFileNameA
GetTempPathA
MoveFileA
DeleteFileA
GetShortPathNameA
GetFullPathNameA
FindClose
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindFirstFileA
SystemTimeToFileTime
GetSystemTime
DosDateTimeToFileTime
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
LocalFileTimeToFileTime
MultiByteToWideChar
SetFileTime
SetErrorMode
GetLastError
GetDiskFreeSpaceA
GetCurrentDirectoryA
GetLogicalDrives
GetEnvironmentStrings
GetCommandLineA
GetVersion
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
ExitProcess
GetStdHandle
GetFileType
GetStartupInfoA
SetStdHandle
FlushFileBuffers
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
SetEndOfFile

advapi32

RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA

ole32

StgSetTimes

mpr

WNetCancelConnectionA
WNetAddConnectionA

Exports

Exports

ABdivC
CFFormat
CFInstallSFM
CFUninstallSFM
DBAppend
DBCallBack
DBFile
DBHeap
DBPort
DBPrintf
DBVPrintf
EndTranslation
FMBufAllowBuffering
FMBufInitReqParms
FMBufRequestBuffering
FMBufSetDfltBuffering
FMCheckAccess
FMClose
FMCopy
FMCopyEx
FMCreateSpec
FMCreateTempName
FMDelete
FMExtractDirectory
FMFileExists
FMFileHasExt
FMFlush
FMFullName
FMGetDiskFreeSpace
FMGetEOF
FMGetPhysSize
FMGetRootPathName
FMISetTime
FMInstall
FMLocateExt
FMLocateName
FMNewToOld
FMOpen
FMOpenCreate
FMRead
FMRename
FMSameFile
FMSeek
FMSeqRead
FMSeqWrite
FMSetEOF
FMSysTime
FMTell
FMTime
FMTransFSpec
FMUninstall
FMWInitFS
FMWrite
FileSpec5to6
FormatDateTime
LABdivCpZ
LzwCmClose
LzwCmOpen
LzwCmStrip
LzwDeChunk
LzwDeClose
LzwDeOpen
MFHandle
MFInstallSFM
MFUninstallSFM
MMAllocLargest
MMGetPointer
MMGlobalFixAlloc
MMGlobalFixFree
MMGlobalFixReAlloc
MMResizeHandle
StartTranslation
SwapBitField
TransFileSpec
TransText
VDICheckFile
VMBuildLangPath
VMErrorStr
VMFreeDLLResHdl
VMGetDLLResHdl
VMGetSystemVersion
VMRevision
VMSetDLLLanguage
addABC
lsprintf
lvsprintf
swapb
swapw
vmemcmp
vmemcpy
vmemset
vrGetItLockIt
vrGetResource
vrGetShortInt
vrLoadString
vrLockResource
vrUnlockResource
vstrcat
vstrcmp
vstrcmpi
vstrcpy
vstrlen
vstrncmp
vstrncmpi
vstrncpy
vwordset

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae40d48742fda2b8d5bbf829cfa5f579

Headers

File Characteristics

Imports

user32

kernel32

advapi32

ole32

mpr

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.bss Size: - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 88B

.data Size: 5KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 54KB - Virtual size: 54KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 59KB

.bss
Size: - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 88B

.data
Size: 5KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 54KB - Virtual size: 54KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB