15ebb8efb2e5e1ce57693c40968b3a1e_JaffaCakes118

General

Target

15ebb8efb2e5e1ce57693c40968b3a1e_JaffaCakes118
Size

1.0MB
MD5

15ebb8efb2e5e1ce57693c40968b3a1e
SHA1

e857bc1ac769fd8eea1bd02be2d97ffedaef8e8a
SHA256

bb71dab1349c42ead38f6148816110e4eb66769ecaa46c27b803c3b84fdaab2a
SHA512

75a3ef4a828b3f996e3a516648e835289efdf11e87f3c18698c8c78780953b577df8dfb80fe6c06c6f1dcfc9b31d440fc27e067666d863f4122a8b7f652cfdfb
SSDEEP

24576:P04Z6mg3p3DUQreGI/Cn6BdZPNU4Oe8uwpxuz1P:P0kY3oQqt/S6lNU4OeHOxuz1P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15ebb8efb2e5e1ce57693c40968b3a1e_JaffaCakes118

Files

15ebb8efb2e5e1ce57693c40968b3a1e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

956934a22bc4c1a9d9275c950c39ea60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpA
lstrcpyA
GetModuleFileNameA
GetProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
lstrlenA
IsDBCSLeadByte
lstrcatA
lstrcmpiA
SetFilePointer
CreateFileA
GetTempFileNameA
GetTempPathA
ReadFile
DeleteFileA
CloseHandle
WriteFile

user32

OemToCharA
CharNextA
wsprintfA
CharLowerA
LoadStringA

msvcrt

isprint
atof
_fullpath
_makepath
_splitpath
memcpy
memmove
??2@YAPAXI@Z
atoi
sprintf
_adjust_fdiv
??3@YAXPAX@Z
__CxxFrameHandler
strchr
mbstowcs
wcstombs
_initterm
memset
free
malloc

Exports

Exports

InitPerThread
IsThreadSafe
UXFDecodeFormatOptions
UXFEncodeFormatOptions
UXFEndJob
UXFFreeFormatOptions
UXFGetContentType
UXFGetErrorText
UXFGetExportFormats
UXFGetPageN
UXFGetVersion
UXFInitExportFormat
UXFInitialize
UXFProcessRecord
UXFStartJob
UXFTermExportFormat
UXFTerminate
UninitPerThread

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

956934a22bc4c1a9d9275c950c39ea60

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 168KB - Virtual size: 166KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 168KB - Virtual size: 166KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 1KB