08a7c9bace5a4962ae65eba35ccc4db7_JaffaCakes118

General

Target

08a7c9bace5a4962ae65eba35ccc4db7_JaffaCakes118
Size

39KB
MD5

08a7c9bace5a4962ae65eba35ccc4db7
SHA1

5a40d559942c726f2ea8cb136c73e85e5b929e24
SHA256

c9dc43332da97afacc4bbaf3280e9236eb6eae55912c8855bc0b728b14300c37
SHA512

5b75e3fd5f46b8dd3c5790974afc203154be9dfecf904147dd8d1da1ef8a0f9d0b13786355000b8cac7ca04a4d2ef6f0e51fe5bcd98a614de971e3e5785856d4
SSDEEP

768:gk0RVjvaQRpWIONtUX4ebGjF130r+pGEn+2/IaOOc8y9L12:qVjvJjONtYx2FzpGwIT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08a7c9bace5a4962ae65eba35ccc4db7_JaffaCakes118

Files

08a7c9bace5a4962ae65eba35ccc4db7_JaffaCakes118
.dll windows:1 windows x86 arch:x86

42fba91fded692dca6e409436c2e253e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

GetActiveWindow
MessageBoxA
wsprintfA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetVersion
LoadLibraryA
ReleaseMutex
SetConsoleCtrlHandler
SetEvent
SetFilePointer
SetStdHandle
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteFile

libmex

mexErrMsgTxt
mexWarnMsgTxt

libmx

mxCalloc
mxCreateDoubleMatrix
mxGetClassID
mxGetM
mxGetN
mxGetPr
mxIsComplex
mxIsNumeric

Exports

Exports

mexFunction

Sections

BEGTEXT
Size: 28KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 5KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42fba91fded692dca6e409436c2e253e

Headers

File Characteristics

Imports

user32

kernel32

libmex

libmx

Exports

Exports

Sections

BEGTEXT Size: 28KB - Virtual size:

.tls Size: 512B - Virtual size:

DGROUP Size: 5KB - Virtual size:

.bss Size: 2KB - Virtual size:

.idata Size: 1KB - Virtual size:

.edata Size: 512B - Virtual size:

.reloc Size: 2KB - Virtual size:

BEGTEXT
Size: 28KB - Virtual size:

.tls
Size: 512B - Virtual size:

DGROUP
Size: 5KB - Virtual size:

.bss
Size: 2KB - Virtual size:

.idata
Size: 1KB - Virtual size:

.edata
Size: 512B - Virtual size:

.reloc
Size: 2KB - Virtual size: