3bd575c3b91cb80b407d8a59778e1240_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3bd575c3b91cb80b407d8a59778e1240_JaffaCakes118
Size

240KB
MD5

3bd575c3b91cb80b407d8a59778e1240
SHA1

b78c09648ee4596386a5e92697b0ef48f6980af8
SHA256

d124aeb3e210da9477e6f90f86982a936222a246bdb9cf75298fdf48d3a7e817
SHA512

e5e1057d6dd4b487ba8a8a28ca043537f3d0d50e1f21cc1631ec09391cb3ee50e89a8858992286891f12820145df0f8f1dc4ef2d8c43ec3c0b58db25add63bef
SSDEEP

6144:LQaJs8+bcflVjV8nSk2Cobnnb39jx6i6gI5aC2cZER:Mz7cfbWlobnz9jMi692cSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bd575c3b91cb80b407d8a59778e1240_JaffaCakes118

Files

3bd575c3b91cb80b407d8a59778e1240_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5436bec34e0afc4b4e0b31b6265b9b88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsProcessorFeaturePresent
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

MessageBoxA

shell32

SHGetSpecialFolderPathA

Exports

Exports

GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartApp
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamApps
SteamClient
SteamContentServer
SteamContentServerUtils
SteamContentServer_Init
SteamContentServer_RunCallbacks
SteamContentServer_Shutdown
SteamFriends
SteamGameServer
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamHTTP
SteamMasterServerUpdater
SteamMatchmaking
SteamMatchmakingServers
SteamNetworking
SteamRemoteStorage
SteamScreenshots
SteamUser
SteamUserStats
SteamUtils
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
g_pSteamClientGameServer

Sections

.text
Size: - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3dm0
Size: - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3dm1
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5436bec34e0afc4b4e0b31b6265b9b88

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Exports

Exports

Sections

.text Size: - Virtual size: 101KB

.rdata Size: - Virtual size: 32KB

.data Size: - Virtual size: 17KB

.3dm0 Size: - Virtual size: 129KB

.3dm1 Size: 238KB - Virtual size: 237KB

.reloc Size: 512B - Virtual size: 152B

.rsrc Size: 512B - Virtual size: 434B

.text
Size: - Virtual size: 101KB

.rdata
Size: - Virtual size: 32KB

.data
Size: - Virtual size: 17KB

.3dm0
Size: - Virtual size: 129KB

.3dm1
Size: 238KB - Virtual size: 237KB

.reloc
Size: 512B - Virtual size: 152B

.rsrc
Size: 512B - Virtual size: 434B