3da5348c16a37b8bfb886c13237f60b2_JaffaCakes118

General

Target

3da5348c16a37b8bfb886c13237f60b2_JaffaCakes118
Size

19KB
MD5

3da5348c16a37b8bfb886c13237f60b2
SHA1

b10befb7991b10b92665a2183a196155ecbd58f8
SHA256

0563ed84512ca574f0105dec16aea7cf11ea32cd9776597c5aa2096589a20564
SHA512

fe9f2cf20f04635c4bf76f53c0aada5012a1f5e34a962626d0d3edf85298d3cad910cfba04b9c82d7698308a029401ece9999cae8f3e8031c94eca60984ba797
SSDEEP

384:WvgptIZ9XwT4V3g4UAZBHrD3FMN9xYDxO8a0A0aE9JYZb:WvgptIZ9XwT4pxvZBHrKN9UwxxFE9KZb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da5348c16a37b8bfb886c13237f60b2_JaffaCakes118

Files

3da5348c16a37b8bfb886c13237f60b2_JaffaCakes118
.dll windows:6 windows x86 arch:x86

8f466fbac81f17206af0523f98f06fb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlGetPartA
SHDeleteKeyA
SHRegDeleteUSValueA
PathIsRootA
UrlIsNoHistoryA

kernel32

GetProcessHeap
LocalFree
lstrcpyA
HeapAlloc
EnumResourceTypesA
WinExec
HeapUnlock
AddConsoleAliasA
SetConsoleDisplayMode
EnumResourceLanguagesW
lstrlenA
SetLastError
CreateNamedPipeW

msacm32

XRegThunkEntry
acmFilterEnumW
acmFilterTagDetailsA
acmFormatSuggest
acmStreamOpen
acmFormatChooseW
acmFormatTagDetailsA
acmStreamPrepareHeader

rtm

MgmReleaseInterfaceOwnership
MgmGetMfe
RtmGetNextRoute
RtmLookupIPDestination

comdlg32

FindTextW
PrintDlgA
CommDlgExtendedError
ChooseFontW
GetSaveFileNameW

advapi32

GetUserNameA
RegDeleteKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExA

msvcrt

memcpy
sprintf

Exports

Exports

tpuwmf

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f466fbac81f17206af0523f98f06fb1

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

msacm32

rtm

comdlg32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 6KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 300B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 300B