1c63e4f4bd4a87bf8a60504373354ce8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1c63e4f4bd4a87bf8a60504373354ce8_JaffaCakes118
Size

105KB
MD5

1c63e4f4bd4a87bf8a60504373354ce8
SHA1

9116a62c9457e4564b410c3d4c5cf210cbfc9020
SHA256

491b1dc1a4ee45f82d8e2dafc832a5d26205e371d2831d2771bd21aa2e30c897
SHA512

ac0f2880f0353bdeaf2810f56003a04dd74d2342daf5e3ed8ce55b87b95ac71e80e08d127ac6ff189aa53f2cfda457a2e1331171ba37749ef99d2d3ef4863da5
SSDEEP

1536:JTuFgGApxp5u0msu09wUmeZ3uRZEUE7z4498HCr0GjXnHDBfhke3WklP9ncobUf3:VuFgGA/uCQGWVE/aHE1xlPrdH/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c63e4f4bd4a87bf8a60504373354ce8_JaffaCakes118

Files

1c63e4f4bd4a87bf8a60504373354ce8_JaffaCakes118
.dll windows:6 windows x86 arch:x86

bc786351e8f927c57a6bf19144b767b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imm32

ImmEnumRegisterWordA
ImmEscapeW
ImmReSizeIMCC

mswsock

AcceptEx
EnumProtocolsW
GetTypeByNameA
dn_expand

mscms

CreateColorTransformW
DisassociateColorProfileFromDeviceW
GetColorProfileHeader
IsColorProfileTagPresent
UnregisterCMMW

odbc32

CursorLibLockDbc
PostODBCError
ord57
ord211
ord12
ord32
ord43
ord38
ord48
ord121

rpcrt4

I_RpcBindingInqTransportType
NdrConformantArrayUnmarshall
NdrNonEncapsulatedUnionMarshall
RpcServerRegisterAuthInfoA
RpcSsAllocate
RpcSsDestroyClientContext

kernel32

CloseHandle
CreateFileMappingW
CreateFileW
DecodePointer
DeleteCriticalSection
DeleteFileW
EncodePointer
EnterCriticalSection
EnumSystemCodePagesW
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MapViewOfFile
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
RtlUnwind
SetEndOfFile
SetFilePointer
SetFilePointerEx
SetFileTime
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

dxiqxxhdqa

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc786351e8f927c57a6bf19144b767b2

Headers

File Characteristics

Imports

imm32

mswsock

mscms

odbc32

rpcrt4

kernel32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 9KB - Virtual size: 16KB

.rsrc Size: 512B - Virtual size: 424B

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 9KB - Virtual size: 16KB

.rsrc
Size: 512B - Virtual size: 424B