JaffaCakes118_6b4b10e0f21a3f0ddb5dda5f6973a275

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_6b4b10e0f21a3f0ddb5dda5f6973a275
Size

304KB
MD5

6b4b10e0f21a3f0ddb5dda5f6973a275
SHA1

032e71848ad28396274514227fde86df3308a8da
SHA256

ebbe606610e9dc3743fde753ada6fbaa34b7aa230e585eedb2bebb1154cb6ebe
SHA512

4cc68a9a83a3417fb659df886673fc0f28346a5a7a08cedd54fe1e4ba81069deb033e243b2638fc83ee4d4adeda245dd6fb6bafd98c3050ad850617446b43a1b
SSDEEP

6144:340dRt+g0QPekyswLCwuSr08hKZFXZoMq3+:o07h0igTx9nXMO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6b4b10e0f21a3f0ddb5dda5f6973a275

Files

JaffaCakes118_6b4b10e0f21a3f0ddb5dda5f6973a275
.dll regsvr32 windows:4 windows x86 arch:x86

4920d3c7fb9fb7adbbdf46909e0bbf62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

atl

ord58
ord21
ord16
ord15
ord18
ord57
ord32
ord23
ord30

kernel32

DisableThreadLibraryCalls
LoadLibraryA
GetModuleFileNameA
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
lstrlenA
CloseHandle
MapViewOfFile
OpenFileMappingA
GetTickCount
GetLastError
CreateFileMappingA
UnmapViewOfFile
ReleaseMutex
WaitForSingleObject
CreateMutexA
RtlUnwind
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetProcAddress
SetStdHandle
FlushFileBuffers
LocalFree
RaiseException

ole32

CoCreateInstance

oleaut32

LoadRegTypeLi
SysStringLen
SysAllocString
SysAllocStringLen
VariantClear
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4920d3c7fb9fb7adbbdf46909e0bbf62

Headers

File Characteristics

Imports

atl

kernel32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 16KB - Virtual size: 21KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 8KB - Virtual size: 5KB

.text Size: 208KB - Virtual size: 208KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 16KB - Virtual size: 21KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 208KB - Virtual size: 208KB