f3389177378084f781a0c4a9af41e985_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f3389177378084f781a0c4a9af41e985_JaffaCakes118
Size

68KB
MD5

f3389177378084f781a0c4a9af41e985
SHA1

47e4c45ce812d167875f83e486cfa04112ca60a6
SHA256

db8b1745aa1194c9538acd9241d1b998a551186f4724aca572275bdb23ccff54
SHA512

97de7476cbfc379f1f2129169c21cc8acd2ca6508fe919fbf1a2bd403e210b80156b52d9dbcb250d4254e7652494a2f2f7f47d938ba22814900a1de4be8774c0
SSDEEP

768:fb9lE9x/tHCTn7BWJ2uBTbnCzwiVD39VY3VkoYF9l6JMCAPK9Zp7F:fhyN5+n7BI2uTwhy3VkjF9lR67F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3389177378084f781a0c4a9af41e985_JaffaCakes118

Files

f3389177378084f781a0c4a9af41e985_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7e41369cc90935168513a5d0804b96d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
MultiByteToWideChar
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
TerminateProcess
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
LCMapStringA
LCMapStringW
GetLastError
FlushFileBuffers
RtlUnwind
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetLocaleInfoW
SetFilePointer
CloseHandle
SetStdHandle

Exports

Exports

idn_free
idna_to_ascii_16z
idna_to_ascii_4i
idna_to_ascii_4z
idna_to_ascii_8z
idna_to_ascii_lz
idna_to_unicode_44i
idna_to_unicode_4z4z
idna_to_unicode_8z4z
idna_to_unicode_8z8z
idna_to_unicode_8zlz
idna_to_unicode_lz16z
idna_to_unicode_lzlz
punycode_decode
punycode_encode
stringprep
stringprep_4i
stringprep_4zi
stringprep_check_version
stringprep_convert
stringprep_locale_charset
stringprep_locale_to_utf8
stringprep_profile
stringprep_ucs4_nfkc_normalize
stringprep_ucs4_to_utf16
stringprep_ucs4_to_utf8
stringprep_unichar_to_utf8
stringprep_utf16_to_ucs4
stringprep_utf8_nfkc_normalize
stringprep_utf8_to_locale
stringprep_utf8_to_ucs4
stringprep_utf8_to_unichar

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e41369cc90935168513a5d0804b96d3

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 4KB - Virtual size: 3KB