43b3782dd787362afe785a366d87b667_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

43b3782dd787362afe785a366d87b667_JaffaCakes118
Size

319KB
MD5

43b3782dd787362afe785a366d87b667
SHA1

9310f0f11d3cb14d8ee47471103588ac64cf01f2
SHA256

2902585d8d0ae8b246bae82b9e52eed44ff6ed4277d10b52b77dd802c1a697a6
SHA512

23dde9bdd4730c7e3d7c642cd94a60c76a11e968581a23e39d986776a34c65efde188b1204b7809962dcecf1c3c171996ff20d8cb4105e05859aa8890e30c700
SSDEEP

6144:ZO6aUzbVmOSOMkKTBd2FZrWZW1qNxFsFo:cxjRz2Fc3DUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b3782dd787362afe785a366d87b667_JaffaCakes118

Files

43b3782dd787362afe785a366d87b667_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1bfd718ff60ffd42a7f9907c0f6ada80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleScreenBufferSize
GetPrivateProfileIntW
EnumerateLocalComputerNamesW
DeleteFileA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
TryEnterCriticalSection
FoldStringW
LoadLibraryA

msvcrt

_ungetch
_open
exit
_fdopen
__getmainargs
_heapwalk
_strtoi64
_except_handler2
_snwscanf
_wsearchenv
__set_app_type
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
___lc_codepage_func
_adj_fdiv_m64
_acmdln
__p__commode
_mktemp
fputwc
_adj_fdiv_r
??_7bad_typeid@@6B@
_ftime64

user32

EndDialog
MessageBoxA

ntdsapi

DsCrackNamesW
DsWriteAccountSpnA
DsFreeSchemaGuidMapW
DsReplicaGetInfoW
DsReplicaVerifyObjectsW
DsCrackUnquotedMangledRdnW
DsReplicaModifyW
DsFreeNameResultA
DsaopBind

polstore

IPSecGetAssignedPolicyData
IPSecCopyFilterSpec
IPSecSetISAKMPData
IPSecFreeMulNFAData
IPSecFreeMulNegPolData
IPSecEnumFilterData
IPSecAllocPolMem
IPSecExportPolicies
IPSecUnassignPolicy

msdart

?WriteUnlock@CLKRHashTable@@QBEXXZ
??0CSpinLock@@QAE@XZ
?_Expand@CLKRLinearHashTable@@AAE?AW4LK_RETCODE@@XZ
?IsReadLocked@CReaderWriterLock@@QBE_NXZ
?HeadNode@CDoubleList@@QBEQBVCListEntry@@XZ

opengl32

glPrioritizeTextures
glVertex2d
glColor3ub
glRasterPos3iv
glTexCoord4s

shell32

SHGetMalloc

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bfd718ff60ffd42a7f9907c0f6ada80

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

ntdsapi

polstore

msdart

opengl32

shell32

Sections

.text Size: 137KB - Virtual size: 136KB

.rdata Size: 70KB - Virtual size: 70KB

.data Size: 22KB - Virtual size: 22KB

.rsrc Size: 87KB - Virtual size: 86KB

.text
Size: 137KB - Virtual size: 136KB

.rdata
Size: 70KB - Virtual size: 70KB

.data
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 87KB - Virtual size: 86KB