44692c5e87cb20e553248483e75ad5fd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44692c5e87cb20e553248483e75ad5fd_JaffaCakes118
Size

83KB
MD5

44692c5e87cb20e553248483e75ad5fd
SHA1

ae952e47edaf61fd8c71b1cbc5ef0a8ea3cd15f3
SHA256

c0ed4e5312766a0554a3a86163ed192a59bbaef9ee77e27f6de61acd5b668197
SHA512

383b65d69f859a8a0609f44cc8a06cd91f6677ef77e7ca3a265baabed483db9be0313d926ab3965b61806e50d33ac9aa66302cc2f9f988701d8a19f32ef1db6b
SSDEEP

1536:7X2tQeOlwjGMwzooHz74n9yRGR517Kw8dBBV1XZbsuaXAhbbvD7+8K+4Y:7PtlaRoHz7NRs5BK7dHfZbsuaaW/Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44692c5e87cb20e553248483e75ad5fd_JaffaCakes118

Files

44692c5e87cb20e553248483e75ad5fd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

23a13d70b858f90758adb6cd40e259df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenWaitableTimerA
GetStartupInfoA
SetConsoleNlsMode
OpenMutexW
GetCommState
FindFirstFileA
HeapCreate
GetCurrentThreadId
GetSystemTimeAsFileTime
GetLastError
QueryPerformanceCounter
GetFileAttributesW
VirtualAlloc
SetFileAttributesW
GetTickCount
GetCurrentProcessId
BackupRead
AddConsoleAliasA
IsBadCodePtr
LZCreateFileW
CreateProcessW
LoadLibraryA
ExpungeConsoleCommandHistoryA
WriteProcessMemory
LoadLibraryW

msvcrt40

??0istream_withassign@@QAE@ABV0@@Z
_winminor
?sync@istream@@QAEHXZ
_safe_fprem1
?seekoff@strstreambuf@@UAEJJW4seek_dir@ios@@H@Z
cos
_safe_fprem
?rdbuf@ostrstream@@QBEPAVstrstreambuf@@XZ
_ismbcgraph
?terminate@@YAXXZ
strncpy
?cin@@3Vistream_withassign@@A

msvcrt20

?freeze@strstreambuf@@QAEXH@Z
raise
_pwctype
_isctype
is_wctype
?init@ios@@IAEXPAVstreambuf@@@Z
_wcsnicmp
?opfx@ostream@@QAEHXZ
?sync@streambuf@@UAEHXZ
??_7ios@@6B@
_wspawnlpe
??1iostream@@UAE@XZ
_fcloseall
??3@YAXPAX@Z
_aexit_rtn
wcspbrk
wcscoll
?gbump@streambuf@@IAEXH@Z
_wspawnle
putwchar

dciman32

DCISetDestination
DCICreateOverlay
DCIEnum
DCIDraw
DCIBeginAccess
WinWatchGetClipList
GetDCRegionData
DCISetSrcDestClip
WinWatchOpen
WinWatchClose
DCICreatePrimary
DCIDestroy
DCICreateOffscreen
DCIEndAccess

dmdskmgr

?GetRegionColorStructPtr@CTaskData@@QAEXPAPAU_REGION_COLORS@@AAH@Z
?GetPrimaryPartitionCount@CDMNodeObj@@QAEKXZ
?GetIVolumeClientVersion@CTaskData@@QAEFXZ
?ShowContextMenu@CContextMenu@@QAEJPAVCWnd@@JJJ@Z
?EnumFirstVolumeMember@CDMNodeObj@@QAEXAAJ0@Z
?IsDiskEmpty@CDMNodeObj@@QAEHXZ
?GetObjectId@CDMNodeObj@@QAEXAA_J@Z
?GetPatternRef@CDMNodeObj@@QAEHXZ
?IsFakeVolume@CDMNodeObj@@QAEHXZ
?GetIVolumeClientVersion@CDMNodeObj@@QAEFXZ
?IsFirstFreeRegion@CDMNodeObj@@QAEHXZ
?IsCurrSystemVolume@CDMNodeObj@@QAEHXZ
?GetDiskCookies@CTaskData@@QAEXAAKPAPAJHKH@Z
?ContainsSystemInformation@CDMNodeObj@@QAEHXZ
?GetStatus@CDMNodeObj@@QAEHXZ

rpcrt4

UuidCreate
NdrGetBuffer
RpcEpResolveBinding
char_from_ndr
NDRCContextBinding
UuidCreateNil
RpcBindingInqAuthClientW
NdrNonEncapsulatedUnionUnmarshall
MesEncodeFixedBufferHandleCreate
RpcServerListen

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23a13d70b858f90758adb6cd40e259df

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt40

msvcrt20

dciman32

dmdskmgr

rpcrt4

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 23KB - Virtual size: 61KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 204B

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 23KB - Virtual size: 61KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 204B