a3514d66b51ab3963b543b5a1ed909c1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a3514d66b51ab3963b543b5a1ed909c1_JaffaCakes118
Size 384KB
Sample240613-blybxssdmk
SHA256 dc5a62588453605409454aa72798250d6db6f090dd76fd662ab20f746a8d3085
MD5 a3514d66b51ab3963b543b5a1ed909c1
SHA1 d93ec10929772a40c7ddc5fe5b19622b4e59196c
SHA512 5270862e785ac3ff69edfcf5801266436a67508c96ee9e5f5ea3cebde1f536cd86f2d0ce2cf0ef68f3e3475781da28dfb5ccea45d306038331b206503ba6d640
SSDEEP 6144:QngfSSiWNePIlJJRV/sieP32lm37LzgmIKJ:QncSShNePIbJbGK0zT9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3514d66b51ab3963b543b5a1ed909c1_JaffaCakes118

File Explorer

a3514d66b51ab3963b543b5a1ed909c1_JaffaCakes118

.dll 384KB

a3514d66b51ab3963b543b5a1ed909c1_JaffaCakes118

IMPHASH 156b1ee5ae111297ce5beb41b81199cc
SHA256 dc5a62588453605409454aa72798250d6db6f090dd76fd662ab20f746a8d3085
MD5 a3514d66b51ab3963b543b5a1ed909c1
SHA1 d93ec10929772a40c7ddc5fe5b19622b4e59196c
SHA512 5270862e785ac3ff69edfcf5801266436a67508c96ee9e5f5ea3cebde1f536cd86f2d0ce2cf0ef68f3e3475781da28dfb5ccea45d306038331b206503ba6d640
SSDEEP 6144:QngfSSiWNePIlJJRV/sieP32lm37LzgmIKJ:QncSShNePIbJbGK0zT9
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

156808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\1\下载者dll源码\1\Debug\1.pdb

kernel32

GetTickCount GetProcAddress WinExec LoadLibraryA GetTempPathA CreateThread WaitForSingleObjectEx IsDebuggerPresent RaiseException MultiByteToWideChar WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetStartupInfoW GetModuleHandleW GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary InterlockedPushEntrySList InterlockedFlushSList GetModuleFileNameW LoadLibraryExW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetModuleFileNameA GetCurrentThread GetACP GetStdHandle GetFileType GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW SetConsoleCtrlHandler GetStringTypeW SetStdHandle HeapSize HeapReAlloc WriteFile GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers EncodePointer DecodePointer WriteConsoleW CloseHandle OutputDebugStringA OutputDebugStringW CreateFileW

user32

wsprintfA

Name

.textbss

Size

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

317KB

Virtual Size

317KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

1024B

Virtual Size

969B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

260B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a3514d66b51ab3963b543b5a1ed909c1_JaffaCakes118

kernel32

user32

generic