a39e09c21855cf25c8910a9dc6abecc9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a39e09c21855cf25c8910a9dc6abecc9_JaffaCakes118
Size

77KB
MD5

a39e09c21855cf25c8910a9dc6abecc9
SHA1

be6a2e340a277cbc0a3a743918091ad3d192fb98
SHA256

8593e6f8b1ff87303dd6f4b6c4087d9c8a6cd0e3fc7efa67db389dc73e24ca16
SHA512

5356819d92c2173d68c531ac7411ad98f35263c31c3642082cb97d7d6cce544ce66290a428790323fb1f1fb6bd1baef595715a68d45d107267977935bd0e26b8
SSDEEP

1536:gQmuHfQew+cj80uji+K5an2VbkZ1zEgbY6ydkIqVebmlr/F50XQe/UWwPj:1bHxcj8s5ACbPgbY6OkBVebmlz0AqaPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a39e09c21855cf25c8910a9dc6abecc9_JaffaCakes118

Files

a39e09c21855cf25c8910a9dc6abecc9_JaffaCakes118
.dll windows:6 windows x86 arch:x86

4cc4698ba913931ef716cb434e2fad94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

free

api-ms-win-core-com-l1-1-0

CoInitializeEx

api-ms-win-core-processthreads-l1-1-0

CreateThread

api-ms-win-core-errorhandling-l1-1-0

GetLastError

api-ms-win-core-synch-l1-1-0

WaitForSingleObject

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-libraryloader-l1-1-0

GetProcAddress

api-ms-win-core-heap-l1-1-0

HeapDestroy

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-debug-l1-1-0

OutputDebugStringA

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

oleaut32

SysAllocString

ntdll

NtClose

httpapi

HttpTerminate

Exports

Exports

DllCanUnloadNow
DllCsiGetHandler

Sections

.MPRESS1
Size: 71KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4cc4698ba913931ef716cb434e2fad94

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

api-ms-win-core-com-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-libraryloader-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

oleaut32

ntdll

httpapi

Exports

Exports

Sections

.MPRESS1 Size: 71KB - Virtual size: 200KB

.MPRESS2 Size: 4KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.MPRESS1
Size: 71KB - Virtual size: 200KB

.MPRESS2
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB