0fce55878b07989409aba7730c446587_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0fce55878b07989409aba7730c446587_JaffaCakes118
Size

416KB
MD5

0fce55878b07989409aba7730c446587
SHA1

f9f295561fad956211b7b9d41ca2e138cabb3103
SHA256

6127faf14797516dde9d91b1fd399514a18fdd9ce0be0b41e73d3ba39cfa610c
SHA512

f8ffb3b7ccf3a875ec3ebbb0e35e3397d82fd6cde2bb8604a03a91c8c45a312fe74c095eb9b6b8827e234e34bfd94e244f111ef3a3937d9e1d7a93f70813ee7d
SSDEEP

12288:rGr/HHa6lnZDJZZzzQDgrBKMkNBloOSoqBn:rGrRlZ9rIP1Qn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fce55878b07989409aba7730c446587_JaffaCakes118

Files

0fce55878b07989409aba7730c446587_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Exports

Exports

kdfAutoStart
kdfAutoStartClean
kdfAutoStartCleanB
kdfAutoStartCleanD
kdfAutoStartV
kdfCkeckKeylogger
kdfExProtect
kdfGetVersion
kdfSelfCheckIntegrity
kdfSetFlashE2E_INJ
kdfSetImageDir
kdfWebBrowserContextMenu
kdfWebBrowserHandleAdd
kdfWebBrowserHandleRemove

Sections

.text
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1zhd4unb
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xyipnkxk
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rh3pfq4j
Size: 531KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ws99q1hx
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f433e7fcc51e68080022754836705744

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: - Virtual size: 76KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: - Virtual size: 32KB

.rsrc Size: 4KB - Virtual size: 1000KB

1zhd4unb Size: - Virtual size: 12KB

xyipnkxk Size: - Virtual size: 56KB

rh3pfq4j Size: 531KB - Virtual size: 532KB

ws99q1hx Size: 4KB - Virtual size: 4KB

.text
Size: - Virtual size: 76KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: - Virtual size: 32KB

.rsrc
Size: 4KB - Virtual size: 1000KB

1zhd4unb
Size: - Virtual size: 12KB

xyipnkxk
Size: - Virtual size: 56KB

rh3pfq4j
Size: 531KB - Virtual size: 532KB

ws99q1hx
Size: 4KB - Virtual size: 4KB