78ee57fb472d6d8b4be408aba4d0bee6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

78ee57fb472d6d8b4be408aba4d0bee6_JaffaCakes118
Size

1.2MB
MD5

78ee57fb472d6d8b4be408aba4d0bee6
SHA1

2ba73a1ce157302cc55578de07bbc40a8ff94266
SHA256

c7c44c189c538313cb56346416f2a4f4bed624cc1a101d7049d55d6c969fb0a3
SHA512

eceb33d7eec4648cf1fea57c206025c18f4bac630ca5776723e2b4d4e55062c1d185dff06cecafe31af16617a1c949f33a550adddc6ef3383de16be743ee848c
SSDEEP

24576:b35e7/86wg8N4PAdSpEZskjgzPEXR+4X56hI74Tfj0kuol92ENt9d:b38D8q8CBaskj0PSR+4X+XTfjX1v2ENV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78ee57fb472d6d8b4be408aba4d0bee6_JaffaCakes118

Files

78ee57fb472d6d8b4be408aba4d0bee6_JaffaCakes118
.dll windows:6 windows x86 arch:x86

f787ed89c52abc571de2b8b846e5d682

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetModuleFileNameA
GetModuleHandleExW
lstrcpyA
GetCurrentThread
GetCurrentProcess
QueryPerformanceCounter
QueryPerformanceFrequency
VirtualQuery
GetModuleHandleA
WriteConsoleW
CreateFileW
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
HeapSize
SetStdHandle
SetFilePointerEx
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
CreateEventA
OpenEventA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
SetLastError
SwitchToThread
LCMapStringW
GetLocaleInfoW
GetCPInfo
VirtualProtect
FlushInstructionCache
FreeLibrary
RtlUnwind
InterlockedFlushSList
RaiseException
LoadLibraryExW
ExitProcess
GetModuleFileNameW
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidLocale

ws2_32

socket

user32

SetTimer

dbghelp

SymGetModuleBase64
StackWalk64
SymInitialize
SymFunctionTableAccess64
SymFromAddr
SymGetLineFromAddr64

mscoree

CLRCreateInstance

Exports

Exports

namkcap_619712
namkcap_366b02
namkcap_541e97
namkcap_baa765
namkcap_73dbef
namkcap_5f86d0
namkcap_8a29de
namkcap_99f55e
namkcap_82635b
namkcap_6845e7
namkcap_a8968c
namkcap_fa8015
namkcap_02761a
namkcap_639d2c
namkcap_550778
namkcap_c39501
namkcap_2ec749
namkcap_a233ea
namkcap_58c7a1
namkcap_b4b408
namkcap_a6ecd9
namkcap_af1111
namkcap_d8795a
namkcap_da5d0f
namkcap_b6268b
namkcap_b244ee
namkcap_e5bece
namkcap_5a397d
namkcap_9e0562
namkcap_a1a2b8
namkcap_744dc2
namkcap_12bdb1
namkcap_52a5f5
namkcap_67ea1c
namkcap_a6546a
namkcap_39ec0c
namkcap_5fa583
namkcap_b3cff5
namkcap_394bb2
namkcap_5c110c
namkcap_ae37d6
namkcap_a1650f
namkcap_4da369
namkcap_da609e
namkcap_f87ed4
namkcap_b2b4e5
namkcap_136519
namkcap_5642fc
namkcap_35c17e
namkcap_ccd871
namkcap_fef593
namkcap_e9b9b3
namkcap_4504ee
namkcap_5aeb48
namkcap_a28445
namkcap_e5ba50
namkcap_208697
namkcap_cd49ac
namkcap_f357f5
namkcap_da6ca4
namkcap_9181cb
namkcap_f8dc6a
namkcap_0a0fc5
namkcap_216caf
namkcap_f7b879
namkcap_d0b4bd
namkcap_b64f07
namkcap_2eab51
namkcap_d930ac
namkcap_e7f661
namkcap_be6b98
namkcap_49c96a
namkcap_7daaa8
namkcap_dbdaaa
namkcap_8aff19
namkcap_e8d690
namkcap_3322a3
namkcap_37231c
namkcap_9d63d5
namkcap_791eab
namkcap_bd2319
namkcap_636201
namkcap_17adef
namkcap_0f5309
namkcap_14db75
namkcap_5ca3ab
namkcap_37f15a
namkcap_1cb4d3
namkcap_be8647
namkcap_7bac66
namkcap_94048b
namkcap_fc1db7
namkcap_90279d
namkcap_18d129
namkcap_a023cf
namkcap_992247
namkcap_a740bf
namkcap_29412d
namkcap_51a06f
namkcap_45a5dc
namkcap_b99b00
namkcap_897a4f
namkcap_7d18be
namkcap_bdcb7c
namkcap_0e1f20
namkcap_317c90
namkcap_042563
namkcap_00d36c
namkcap_a66ac3
namkcap_5eab7c
namkcap_484b82
namkcap_c05e35
namkcap_2816a9
namkcap_7f1b0a
namkcap_89e974
namkcap_431b21
namkcap_0d2024
namkcap_de4180
namkcap_78b9c7
namkcap_94e30f
namkcap_8c1f6d
namkcap_417580
namkcap_fa4dc1
namkcap_ea0865
namkcap_e78409
namkcap_5876e9
namkcap_f7624f
namkcap_a1518a
namkcap_586909
namkcap_0148a5
namkcap_6d9433
namkcap_99f3fc
namkcap_9d4874
namkcap_f349cd
namkcap_602218
namkcap_bff7bc
namkcap_761f42
namkcap_de9d80
namkcap_bfeacd
namkcap_e2e90b
namkcap_77f805
namkcap_1b7c74
namkcap_314d90
namkcap_0cbb2e
namkcap_750319
namkcap_82412e
namkcap_729872
namkcap_4d8b28
namkcap_628ff6
namkcap_b3d909
namkcap_2ebb5e
namkcap_687c51
namkcap_c744a5
namkcap_a38da9
namkcap_2b6964
namkcap_146899
namkcap_673da9
namkcap_9e6f50
namkcap_99296c
namkcap_ddb9ed
namkcap_7d7e74
namkcap_87dd00
namkcap_cf0c86
namkcap_c7bbfc
namkcap_89ce0b
namkcap_c82121
namkcap_c34d27
namkcap_5d4c9c
namkcap_60904b
namkcap_0ece52
namkcap_e4e98a
namkcap_b8260f
namkcap_35a48b
namkcap_64445b
namkcap_139f82
namkcap_ac15a1
namkcap_45d108
namkcap_4b196c
namkcap_c62032
namkcap_d8274d
namkcap_b4c13e
namkcap_33e2d1
namkcap_72d1a7
namkcap_fc937d
namkcap_955f09
namkcap_cb49ac
namkcap_19b47b
namkcap_a9c8fd
namkcap_4a99cf
namkcap_1ef106
namkcap_dd5d7c
namkcap_3eaf82
namkcap_1ddfbd
namkcap_b03944
namkcap_f9493d
namkcap_8ab6ba
namkcap_62fad6
namkcap_85be73
namkcap_d20bf8
namkcap_40e849
namkcap_0153df
namkcap_a11e36
namkcap_0056b0
namkcap_86ad6a
namkcap_ef687a
namkcap_36b07f
namkcap_c0c0e3
namkcap_15bbf7
namkcap_2f579e
namkcap_096ba4
namkcap_89ddf6
namkcap_73afe6
namkcap_65572a
namkcap_07895f
namkcap_0adb4c
namkcap_6c9655
namkcap_f99b5a
namkcap_798028
namkcap_66eb98
namkcap_e871c7
namkcap_97f7ea
namkcap_0bfdd0
namkcap_737bb9
namkcap_94d158
namkcap_55b836
namkcap_840bdf
namkcap_aac3c0
namkcap_4810d0
namkcap_49105d
namkcap_cd0dc3
namkcap_4d7ce5
namkcap_626f92
namkcap_74fede
namkcap_7cf81b
namkcap_9c65c9

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

________
Size: 902KB - Virtual size: 902KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f787ed89c52abc571de2b8b846e5d682

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

user32

dbghelp

mscoree

Exports

Exports

Sections

.text Size: 236KB - Virtual size: 236KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 6KB - Virtual size: 16KB

________ Size: 902KB - Virtual size: 902KB

.reloc Size: 15KB - Virtual size: 15KB

.rsrc Size: 512B - Virtual size: 469B

.text
Size: 236KB - Virtual size: 236KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 6KB - Virtual size: 16KB

________
Size: 902KB - Virtual size: 902KB

.reloc
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 512B - Virtual size: 469B