44ccf64ef934392ce897d2a1733eb40f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

44ccf64ef934392ce897d2a1733eb40f_JaffaCakes118
Size

44KB
MD5

44ccf64ef934392ce897d2a1733eb40f
SHA1

0e0cffad06d601c0b8aa608dceb1344d853d847a
SHA256

12b21a403850a3f01293119a3e231f88b215ff0a5cd5cfa44fd7ac071a07816e
SHA512

a0ecb30060aca2e286d03acd6ca029caa63be9a92df714f78c65f6566cae06f021c17c090c8b4f8992b316da53cc6d1ee43055f5e03a5eb242e91fe7363be93e
SSDEEP

768:XSdr6cosw+pMj0811/VjiTJXW6uo0gGzI93ScSD2ocLfwY2J:iTonhLhVIXWlhsCv2pN2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ccf64ef934392ce897d2a1733eb40f_JaffaCakes118

Files

44ccf64ef934392ce897d2a1733eb40f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

c42a126b9a758d348deb0953f5a78738

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetPriorityClass
ResetEvent
CopyFileW
FreeResource
lstrlenW
EnterCriticalSection
WritePrivateProfileStructA
Sleep
LoadLibraryA
DeleteFileW
InterlockedDecrement
DeleteCriticalSection
GetCurrentProcessId
MoveFileExW
RaiseException
InitializeCriticalSection
GetProcessHeap
LocalAlloc
SetEvent
LocalAlloc
SetEnvironmentVariableW
VirtualAlloc
WritePrivateProfileSectionW
SetEndOfFile
LoadLibraryW
GetModuleFileNameA
GetStartupInfoA
SetCurrentDirectoryW
GetLastError
GetCurrentThreadId
CreateWaitableTimerA
CreateFileW
GetPrivateProfileStructA
CloseHandle

ntdll

ZwFlushVirtualMemory
NtExtendSection
NtGetWriteWatch
NtDelayExecution
ZwDuplicateObject
NtCreateWaitablePort
NtOpenEvent
NtFlushBuffersFile
NtImpersonateClientOfPort
ZwFilterToken

Exports

Exports

CreateProcessNotify
GetExtendedUdpTable
GetOwnerModuleFromUdp6Entry
AllocateAndGetIpAddrTableFromStack
DllClientCleanup
InternalSetIpStats
nsloHost
DllClientStartup
register_icmp
GetFriendlyIfIndex
NotifyAddrChange
InternalDeleteIpForwardEntry
NTTimeToNTPTime
GetBestRoute
InternalGetUdpTable
InternalCreateIpForwardEntry
CreateIpForwardEntry
NhGetInterfaceNameFromDeviceGuid
GetOwnerModuleFromUdpEntry
GetOwnerModuleFromTcpEntry
GetOwnerModuleFromTcp6Entry
InternalGetIfTable
UnenableRouter
EnableRouter
CreateIpNetEntry
IcmpCreateFile
GetBestInterfaceEx
SetTcpEntry
GetTcpStatistics
GetAdaptersAddresses
SetIpStatistics
IcmpParseReplies
GetBestInterface
GetExtendedTcpTable
DeleteIpNetEntry
GetAdapterOrderMap
GetIfTable
GetTcpStatisticsEx
do_echo_rep
InternalDeleteIpNetEntry
InternalSetIpNetEntry
GetIcmpStatisticsEx
DeleteIPAddress
SendARP
GetRTTAndHopCount
DeleteProxyArpEntry
GetAdapterIndex
Icmp6CreateFile
IcmpCloseHandle
NotifyRouteChange
GetNumberOfInterfaces
IpRenewAddress
SetAdapterIpAddress
GetIpStatisticsEx
GetIpStatistics
GetIpNetTable
FlushIpNetTable
NhGetGuidFromInterfaceName
GetIpAddrTable
GetAdaptersInfo
GetIcmpStatistics
CancelIPChangeNotify
GetNetworkParams
RestoreMediaSense
GetIpForwardTable
GetUdpTable
InternalGetIpNetTable
SetIfEntry
do_echo_req
IcmpSendEcho2
SetIpTTL
DeleteIpForwardEntry
GetUniDirectionalAdapterInfo
GetUdpStatistics
CreateProxyArpEntry
InternalSetIpForwardEntry
GetTcpTable
NhGetInterfaceNameFromGuid
InternalSetTcpEntry
NhpAllocateAndGetInterfaceInfoFromStack
SetIpForwardEntry

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 375B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c42a126b9a758d348deb0953f5a78738

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 375B

.rsrc Size: 33KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 375B

.rsrc
Size: 33KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 4KB