JaffaCakes118_43bf7dd7ae653cc429a476f4812c44f2

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_43bf7dd7ae653cc429a476f4812c44f2
Size

168KB
MD5

43bf7dd7ae653cc429a476f4812c44f2
SHA1

e30793ba85d988546b9db073abfbb8bf15617a2a
SHA256

2d549f2949ac1525fca397baf8ec6b932e4734380c8ae9614e845af4ba7f660b
SHA512

64656c338637377207c1e8df7cbc3dfa66a695940dd0927ed816d5c30afa4873a0786b9b1d3b0751ea2626677ac6253aa8b71b04012fcc2a48421776e4a3c78d
SSDEEP

3072:w7nmEOsOmajrUSjh1U7SfmS7UZZF3n4DtJQETeJ6MjtxeTU6dsLBqBMlSd/EXUKV:w7mEOs1ajrUSjh1U7SfvUZZFvT9eTLdu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_43bf7dd7ae653cc429a476f4812c44f2

Files

JaffaCakes118_43bf7dd7ae653cc429a476f4812c44f2
.dll windows:4 windows x86 arch:x86

eca06d5bd512292d65b5ccecc4b67fae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime
timeKillEvent
timeSetEvent

msvcrt

??1type_info@@UAE@XZ
_purecall
malloc
_initterm
_onexit
__dllonexit
_EH_prolog
strstr
calloc
free
_vsnprintf
fopen
fprintf
_strdate
_strtime
fclose
__CxxFrameHandler
wcslen
??2@YAPAXI@Z
sprintf
??3@YAXPAX@Z
_adjust_fdiv

mfc42

ord1116
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord540
ord800
ord2818

kernel32

LocalAlloc
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
GetModuleHandleA
OutputDebugStringA
WideCharToMultiByte
CreateEventA
GetLastError
DeviceIoControl
GetOverlappedResult
CloseHandle
MultiByteToWideChar
lstrcpyA
FormatMessageA
LocalFree
GetTimeZoneInformation
GetTickCount
Sleep

user32

SendDlgItemMessageA
MessageBoxA
SendMessageA
KillTimer
InvalidateRect
wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCreateKeyA
RegDeleteKeyA
RegCloseKey

ole32

CoUninitialize
CoCreateInstance
CreateBindCtx
CoTaskMemFree
CoInitialize
MkParseDisplayName

oleaut32

SafeArrayAccessData
SysFreeString

Exports

Exports

AM_KSCATEGORY_CROSSBAR
IID_IAMCrossbar
KNC1_CrossbarRoute
KNC1_Done
KNC1_Enumarate
KNC1_GetInfo
KNC1_I2CMultiRead
KNC1_I2CMultiWrite
KNC1_Init
KNC1_RC_Init
KNC1_RDS_Clear
KNC1_RDS_Done
KNC1_RDS_Init
KNC1_RDS_Set
KNC1_Release
KNC1_TVTunerAutoscanStart
KNC1_TVTunerAutoscanStop
KNC1_TVTunerDone
KNC1_TVTunerInit
KNC1_TVTunerSetChannel
KNC1_TVTunerSetFrequency
KNC1_TVTunerSetOffset
KNC1_TVTunerSetTuner
KNC1_Tuner_ReadAFC
KNC1_Tuner_ReadStatus
KNC1_Tuner_SetFrequency
KNC1_Tuner_SetMode
KNC1_VampVBIInit
KNC1_VampVBINotifyCreate
KNC1_VampVBINotifyRelease
KNC1_VampVBIRelease
KNC1_VampVBISetCaptureFilter
KNC1_VampVBISetInputPin
KNC1_VampVBIStreamCreate
KNC1_VampVBIStreamGetInfo
KNC1_VampVBIStreamRelease
KNC1_WDMCrossbarCanRoute
KNC1_WDMCrossbarGetPinName
KNC1_WDMCrossbarGetPinType
KNC1_WDMCrossbarRelease
KNC1_WDMCrossbarRoute
KNC1_WDMFilterConnect
KNC1_WDMSettings
KNC1_WDMTunerConnect
KNC1_WDMTunerGetChannels
KNC1_WDMTunerRelease
KNC1_WDMTunerSetChannel
KNC1_WDMTunerSetCountryCode
KNC1_WDMTunerSetInputType
KNC1_WDMTunerSetMode
KNC1_WDMTunerSetTuningSpace
MyDbgOut
MyDbgOut2
MyDbgOut3
MyDbgOutInit
REG_GetBinary
REG_GetBool
REG_RemoveKey
REG_SetBinary
REG_SetBool
REG_SetLine
THIS_REG_GetLine
WDM_DevicesEnumarate
WDM_DevicesQuery
WDM_Done
WDM_Init
WDM_VBISetCallback
WDM_VBIStreamCreate
WDM_VBIStreamRelease

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eca06d5bd512292d65b5ccecc4b67fae

Headers

File Characteristics

Imports

winmm

msvcrt

mfc42

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 14KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 92KB - Virtual size: 92KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 14KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 92KB - Virtual size: 92KB