2a8c3923ae7e2022f5d80cf4d435d23f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2a8c3923ae7e2022f5d80cf4d435d23f_JaffaCakes118
Size

4.7MB
MD5

2a8c3923ae7e2022f5d80cf4d435d23f
SHA1

f2168e41514f12db715cb709f6ed8e4d6021ad0a
SHA256

325845dd70f135fd7d543aa480c99ecaa528f8cb76c0d3ca807073bd0f0657f9
SHA512

5521ed7cb50cc58ee3ba004be5205469b32627f51d500dd28ea65c089d16e8cb12a6ec780152eaf2d46564f9dfe7b9d7eea71e3af924acd92c426475e9964a52
SSDEEP

98304:uBDbwVM1PxS4SznwVrSC/qI3lDYjvj6XvYeTUlMfX3OdhK7:uBDlXSz4/qI3lDYjvj6XvYeTUlMfXeK7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a8c3923ae7e2022f5d80cf4d435d23f_JaffaCakes118

Files

2a8c3923ae7e2022f5d80cf4d435d23f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

efed03c40e030bdedbd228365652d312

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CloseHandle
CreateSemaphoreA
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FindAtomA
GetAtomNameA
GetModuleHandleA
GetProcAddress
GetVersionExA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseSemaphore
Sleep
WaitForSingleObject
WideCharToMultiByte

msvcrt

_strnicmp
__dllonexit
__lc_codepage
__mb_cur_max
_assert
_beginthreadex
_errno
_iob
_isctype
_pctype
_snprintf
_vsnprintf
abort
acos
asin
atan
ceil
cos
cosh
exp
fflush
floor
fputc
free
frexp
getenv
ldexp
localeconv
log
log10
malloc
memcmp
memcpy
memmove
memset
pow
qsort
realloc
sin
sinh
sqrt
sscanf
strchr
strcmp
strcpy
strlen
strncmp
strtol
tan
tanh
toupper
wcslen

Exports

Exports

av_fft_calc
av_fft_end
av_fft_init
av_fft_permute
av_free
av_h264_decode_frame
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_parser_close
av_parser_init
av_parser_parse
av_vc1_decode_frame
avcodec_alloc_context
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio2
avcodec_decode_video
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_decode_init_is_avc
avcodec_h264_search_recovery_point
avcodec_init
avcodec_open
avcodec_register_all
avcodec_thread_free
avcodec_thread_init
dsputil_init
getVersion

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

/4
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 659KB - Virtual size: 658KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 512B - Virtual size: 256B

IMAGE_SCN_MEM_DISCARDABLE

/34
Size: 512B - Virtual size: 367B

IMAGE_SCN_MEM_DISCARDABLE

/50
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_MEM_DISCARDABLE

/62
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE

/76
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE

/88
Size: 512B - Virtual size: 444B

IMAGE_SCN_MEM_DISCARDABLE

/101
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_DISCARDABLE

/112
Size: 512B - Virtual size: 440B

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

efed03c40e030bdedbd228365652d312

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 3.6MB - Virtual size: 3.6MB

/4 Size: 83KB - Virtual size: 83KB

.data Size: 22KB - Virtual size: 22KB

.rdata Size: 659KB - Virtual size: 658KB

.rodata Size: 512B - Virtual size: 192B

.bss Size: - Virtual size: 3.9MB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 64KB - Virtual size: 64KB

/19 Size: 512B - Virtual size: 256B

/34 Size: 512B - Virtual size: 367B

/50 Size: 9KB - Virtual size: 8KB

/62 Size: 2KB - Virtual size: 2KB

/76 Size: 2KB - Virtual size: 1KB

/88 Size: 512B - Virtual size: 444B

/101 Size: 4KB - Virtual size: 3KB

/112 Size: 512B - Virtual size: 440B

.text
Size: 3.6MB - Virtual size: 3.6MB

/4
Size: 83KB - Virtual size: 83KB

.data
Size: 22KB - Virtual size: 22KB

.rdata
Size: 659KB - Virtual size: 658KB

.rodata
Size: 512B - Virtual size: 192B

.bss
Size: - Virtual size: 3.9MB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 64KB - Virtual size: 64KB

/19
Size: 512B - Virtual size: 256B

/34
Size: 512B - Virtual size: 367B

/50
Size: 9KB - Virtual size: 8KB

/62
Size: 2KB - Virtual size: 2KB

/76
Size: 2KB - Virtual size: 1KB

/88
Size: 512B - Virtual size: 444B

/101
Size: 4KB - Virtual size: 3KB

/112
Size: 512B - Virtual size: 440B