1f4561fdf13a45a32e28929dc28ac763_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1f4561fdf13a45a32e28929dc28ac763_JaffaCakes118
Size

221KB
MD5

1f4561fdf13a45a32e28929dc28ac763
SHA1

b3300f6bd8865f74369412f5bee34a5f8ea74814
SHA256

4c829ec54eb292d692eddd7e186d8b9fbda23a6b82995b2df54926bd9d3c7547
SHA512

eb6184daa7384b6650ffd48b6e210a1e9f7feef8bc20d6667f2dcd66a1d5737cac10f70dbc2ef16203cbeab69a83d089d853fe559a7bd5ab1819e47770625e4e
SSDEEP

3072:yc7QGGmNnz3tchG0f7fYhlelJa6NCTWka+O7eFDQAS+G/gwVUVi:v7Q3ynzdchGHlelJaalj+Vi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f4561fdf13a45a32e28929dc28ac763_JaffaCakes118

Files

1f4561fdf13a45a32e28929dc28ac763_JaffaCakes118
.dll windows:6 windows x86 arch:x86

79f899d002a1582a68451aad9a041289

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Meister\Documents\Projects\BrokenShield\Bin\x86\Release\BrokenShield.pdb

Imports

user32

IsWindowVisible
ShowWindow

shell32

SHGetFolderPathA

shlwapi

PathFindFileNameA

dbghelp

ImageNtHeader

kernel32

FlushFileBuffers
CreateFileW
SetEndOfFile
GetStringTypeW
GetStartupInfoW
FindResourceA
LoadResource
SizeofResource
lstrcmpiA
LockResource
GetModuleFileNameA
GetCurrentProcessId
GetModuleHandleW
GetCurrentProcess
GetConsoleWindow
VirtualAllocEx
WriteProcessMemory
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsProcessorFeaturePresent
HeapValidate
GetSystemInfo
IsDebuggerPresent
ReadFile
GetConsoleMode
ReadConsoleW
GetStdHandle
WriteFile
GetConsoleCP
CloseHandle
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
OutputDebugStringA
WriteConsoleW
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
HeapAlloc
SetStdHandle
SetFilePointerEx
LCMapStringW

Sections

.text
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79f899d002a1582a68451aad9a041289

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

shell32

shlwapi

dbghelp

kernel32

Sections

.text Size: 154KB - Virtual size: 154KB

.rdata Size: 49KB - Virtual size: 49KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 154KB - Virtual size: 154KB

.rdata
Size: 49KB - Virtual size: 49KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 9KB