JaffaCakes118_621b397173f97eee1cb9fb4a95871270

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_621b397173f97eee1cb9fb4a95871270
Size

91KB
MD5

621b397173f97eee1cb9fb4a95871270
SHA1

f5a3cb20ad5e3716342eeeb959182c09200ff948
SHA256

b3f03ea75b077ceb00900446565ebd141a96dc7cc3e67735fd81631d9876b83b
SHA512

fb2d1d6a2d8d55464a8c0a1d2c09fc6f720bac075c07a0090eafe49c98040b1cd6a3aaf935071840b52d9b0d53aeaa82b69ea286fd800b92cedf805db816f675
SSDEEP

1536:0PdRzeNwp25MY8nC83+LJmEDTeVUwpibblwzmfSHYdvoZe0X+1Qexk7OM2soPzai:0P3EneC83AJm0Tt+uwzmaHow/X8nM2sU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_621b397173f97eee1cb9fb4a95871270

Files

JaffaCakes118_621b397173f97eee1cb9fb4a95871270
.dll windows:5 windows x86 arch:x86

d4a6ad81669c70ab6cd1669f58cfcb28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryA
GetCurrentDirectoryA
lstrlenA
GetModuleFileNameA
LocalFree
LocalAlloc
lstrcmpiA
GetDiskFreeSpaceA
GetWindowsDirectoryA
MultiByteToWideChar
lstrcmpA
WideCharToMultiByte
GetSystemDefaultLCID
IsBadStringPtrA
IsBadReadPtr
IsBadStringPtrW
lstrlenW
GetCurrentThreadId
TlsSetValue
GetCommandLineA
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleA
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
SetCurrentDirectoryA
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
RtlUnwind
GetVersionExA
lstrcpyA
lstrcatA
LoadLibraryA
GetProcAddress
OutputDebugStringA
CreateMutexA
GetLastError
CloseHandle
FreeEnvironmentStringsW
FreeLibrary

user32

wsprintfW
wsprintfA
GetKeyboardType
DestroyWindow
SetFocus
CreateDialogParamA
SetDlgItemTextA
MessageBoxA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA

winmm

mmioRead
mmioDescend
mmioOpenA
mmioClose

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

ole32

StringFromGUID2

Exports

Exports

DirectXDeviceDriverSetupA
DirectXDeviceDriverSetupW
DirectXLoadString
DirectXRegisterApplicationA
DirectXRegisterApplicationW
DirectXSetupA
DirectXSetupCallback
DirectXSetupGetFileVersion
DirectXSetupGetVersion
DirectXSetupIsEng
DirectXSetupIsJapan
DirectXSetupIsJapanNec
DirectXSetupSetCallback
DirectXSetupShowEULA
DirectXSetupW
DirectXUnRegisterApplication

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d4a6ad81669c70ab6cd1669f58cfcb28

Headers

File Characteristics

Imports

kernel32

user32

advapi32

winmm

version

ole32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 960B

.reloc Size: 3KB - Virtual size: 3KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 26KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 3KB - Virtual size: 3KB

.rmnet
Size: 56KB - Virtual size: 60KB