32449550a8d3de642e829b1cb47390bd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

32449550a8d3de642e829b1cb47390bd_JaffaCakes118
Size

165KB
MD5

32449550a8d3de642e829b1cb47390bd
SHA1

cb28a050809319f3515f7a580285f2871292de49
SHA256

8ff2ce0325df5dcd49373dcece0f31012c581f012fb7dde3a9ddddaaf2ab47d3
SHA512

d21aa1402061b41f4517c22f04e2ba93b5dc6b5b297c989fa0366ed8f5e7e4170b54450a448a98cc3da776d7213d7b65d577dbd4a8417ab152a02b1126ef10a1
SSDEEP

3072:30Y2tuJqVwGnP3KzF14n1TiFp8evtwbCAczwWQWVW4PObyBAqDohGKJ0lYsrQCU:30Y2tiFZF141KtmOohPJ0ysk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32449550a8d3de642e829b1cb47390bd_JaffaCakes118

Files

32449550a8d3de642e829b1cb47390bd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3114df8067553896f96c1ad76817fa06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__dllonexit
__mb_cur_max
__setusermatherr
_amsg_exit
_errno
_initterm
_iob
_lock
_onexit
_unlock
abort
atoi
calloc
fprintf
fputc
free
fwrite
getenv
localeconv
malloc
memmove
memset
memcpy
setlocale
strchr
strerror
strlen
strncmp
vfprintf
wcslen

avutil-55

av_audio_fifo_alloc
av_audio_fifo_drain
av_audio_fifo_free
av_audio_fifo_read
av_audio_fifo_size
av_audio_fifo_write
av_default_item_name
av_frame_get_buffer
av_free
av_freep
av_get_bytes_per_sample
av_get_channel_layout_nb_channels
av_get_channel_layout_string
av_get_cpu_flags
av_get_packed_sample_fmt
av_get_planar_sample_fmt
av_get_sample_fmt_name
av_lfg_init
av_log
av_malloc
av_mallocz
av_opt_free
av_opt_set_defaults
av_reduce
av_rescale_rnd
av_sample_fmt_is_planar
av_samples_alloc
av_samples_fill_arrays
av_samples_get_buffer_size
av_samples_set_silence

Exports

Exports

avresample_alloc_context
avresample_available
avresample_build_matrix
avresample_close
avresample_config
avresample_configuration
avresample_convert
avresample_convert_frame
avresample_free
avresample_get_class
avresample_get_delay
avresample_get_matrix
avresample_get_out_samples
avresample_is_open
avresample_license
avresample_open
avresample_read
avresample_set_channel_mapping
avresample_set_compensation
avresample_set_matrix
avresample_version

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3114df8067553896f96c1ad76817fa06

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

avutil-55

Exports

Exports

Sections

.text Size: 127KB - Virtual size: 127KB

.data Size: 512B - Virtual size: 76B

.rdata Size: 11KB - Virtual size: 11KB

.rodata Size: 512B - Virtual size: 288B

/4 Size: 15KB - Virtual size: 15KB

.bss Size: - Virtual size: 3KB

.edata Size: 1024B - Virtual size: 718B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 127KB - Virtual size: 127KB

.data
Size: 512B - Virtual size: 76B

.rdata
Size: 11KB - Virtual size: 11KB

.rodata
Size: 512B - Virtual size: 288B

/4
Size: 15KB - Virtual size: 15KB

.bss
Size: - Virtual size: 3KB

.edata
Size: 1024B - Virtual size: 718B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 3KB - Virtual size: 2KB