511b6b02204cf8e96d169a4401d1ab9d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

511b6b02204cf8e96d169a4401d1ab9d_JaffaCakes118
Size

7.0MB
MD5

511b6b02204cf8e96d169a4401d1ab9d
SHA1

97fb9c4a349a674f005f49f89d03cf522b040d6c
SHA256

a1b68d645e986decbf9cae93f6a98a228604ed9ee47911023b0d4935cc28cb94
SHA512

76d0ae80037f6a472e83d8c7b47697a112bb92d9ef5e7d02148c8ffd6882298d1edefceb37a61e796a19b92d643f4bcbb8cf4d100471a2779ff2cfcb0468bdfe
SSDEEP

196608:kbn+nq+DYEY4QuwwV1At902yu+D02yWVI7b:En+57ZTLu60n7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
511b6b02204cf8e96d169a4401d1ab9d_JaffaCakes118

Files

511b6b02204cf8e96d169a4401d1ab9d_JaffaCakes118
.dll windows:6 windows x86 arch:x86

727c6b1338fae0566b6eeb770d7d0642

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

normaliz

IdnToAscii

ws2_32

getsockname

wldap32

ord200

crypt32

CertCloseStore

advapi32

GetUserNameA

kernel32

FreeLibrary
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetMessageA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

gdi32

CreateFontA

shell32

ShellExecuteA

imm32

ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

msvcp140

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

dbghelp

ImageNtHeader

comctl32

InitCommonControlsEx

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140

_setjmp3

api-ms-win-crt-stdio-l1-1-0

fsetpos

api-ms-win-crt-string-l1-1-0

toupper

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

calloc

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-runtime-l1-1-0

strerror

api-ms-win-crt-filesystem-l1-1-0

_fstat64

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-math-l1-1-0

_CIcosh

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_difftime64

wtsapi32

WTSSendMessageW

Sections

.text
Size: - Virtual size: 690KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bruh0
Size: - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

bruh1
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

727c6b1338fae0566b6eeb770d7d0642

Headers

DLL Characteristics

File Characteristics

Imports

normaliz

ws2_32

wldap32

crypt32

advapi32

kernel32

user32

gdi32

shell32

imm32

d3dcompiler_47

msvcp140

dbghelp

comctl32

d3d11

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

wtsapi32

Sections

.text Size: - Virtual size: 690KB

.rdata Size: - Virtual size: 180KB

.data Size: - Virtual size: 9KB

bruh0 Size: - Virtual size: 4.4MB

bruh1 Size: 7.0MB - Virtual size: 7.0MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 506B

.text
Size: - Virtual size: 690KB

.rdata
Size: - Virtual size: 180KB

.data
Size: - Virtual size: 9KB

bruh0
Size: - Virtual size: 4.4MB

bruh1
Size: 7.0MB - Virtual size: 7.0MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 506B