4203becca6f475d6921523b84f014dad_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4203becca6f475d6921523b84f014dad_JaffaCakes118
Size

49KB
MD5

4203becca6f475d6921523b84f014dad
SHA1

01e63d4ddea92f5e8e9ce97fdc40dde1ddb00ea9
SHA256

bbd63edf78721afe89259e4a8dedd2fbd532a7fa89001bcd4ddc203612ba8589
SHA512

ff1dba36a7b9df25061b4423de52daf2c9c5f7a261c400e793ed45810b263b57c92c888f1e3daac7e5957b9095a25c16d187d0cc429f2f5d329d329f223208ae
SSDEEP

1536:bojme8JkoRyB4/4Q62ERxqMkdFudL4jNiVnQ:bYme8JkoIBQ4P2TMkqd0jNiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4203becca6f475d6921523b84f014dad_JaffaCakes118

Files

4203becca6f475d6921523b84f014dad_JaffaCakes118
.dll windows:5 windows x86 arch:x86

7466c99c459e1f33689c76f8084bd2a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetPixel
SetTextColor
GetCurrentObject
CreatePen
CombineRgn
RealizePalette
GetNearestColor
CreateBrushIndirect
UpdateColors

ntdll

ZwOpenJobObject
NtInitializeRegistry
NtOpenMutant
ZwOpenEventPair

user32

CharNextW
PostQuitMessage
BringWindowToTop
GetWindowDC
GetClassLongW
LoadCursorA
DialogBoxIndirectParamW
CreateDialogIndirectParamW
ClientToScreen
SetCapture
SendMessageW
GetDC
SetCursorPos
SetWindowLongW
GetMessageW
MessageBoxA
SetFocus
LoadMenuA
GetMonitorInfoA
FindWindowA

kernel32

GlobalAlloc
GetCommandLineW
GetVersionExW
QueueUserAPC
GetLongPathNameW
GlobalFree
CloseHandle
CreateProcessW
InterlockedDecrement
GetCurrentProcessId
TlsSetValue
GetLocaleInfoW
VirtualAlloc
GetCurrentProcess
TryEnterCriticalSection
lstrlenA
CreateEventW
HeapAlloc

shlwapi

PathRemoveBlanksW
PathIsDirectoryW
PathIsURLW

Exports

Exports

GetTcpStatistics
NTTimeToNTPTime
CreateProcessNotify
GetOwnerModuleFromUdpEntry
SetIpStatistics
clictend
GetIpStatistics
CancelIPChangeNotify
CreateIpForwardEntry
GetRTTAndHopCount
DeleteProxyArpEntry
EnableRouter
IpReleaseAddress
InternalGetIfTable
IpRenewAddress
do_echo_rep
GetIpErrorString
GetUdpStatistics
GetIcmpStatistics
DeleteIpNetEntry
GetAdapterIndex
GetPerAdapterInfo
AddIPAddress
NotifyRouteChange
DeleteIpForwardEntry
GetTcpStatisticsEx
do_echo_req
InternalSetIpStats
SetIpTTL
Icmp6SendEcho2
InternalSetTcpEntry
AllocateAndGetIpAddrTableFromStack
DisableMediaSense
InternalGetIpForwardTable
IcmpCloseHandle
GetIpNetTable
NTPTimeToNTFileTime
InternalGetIpAddrTable
CreateIpNetEntry
NhGetGuidFromInterfaceName
GetIfEntry
NhGetInterfaceNameFromDeviceGuid
SendARP
GetFriendlyIfIndex
GetNumberOfInterfaces
SetTcpEntry

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7466c99c459e1f33689c76f8084bd2a5

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

ntdll

user32

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 35KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 35KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB