2264cf077068f09d568ae109adb613d2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2264cf077068f09d568ae109adb613d2_JaffaCakes118
Size

3.0MB
MD5

2264cf077068f09d568ae109adb613d2
SHA1

8cf326f3de36dea37b4c006ddd93990992e3bc79
SHA256

fd02dfe1fe8d773edf2507328603bd7da4a706079a05e588e8826ff717d2a408
SHA512

a28ebc95b358f5a9512c9af6f91e0e3432d41070872c05cac67bbc375046dc138dcae7d63c9d9cbe7c72ee85f205482e490913c51dda235c1082e743445352c9
SSDEEP

49152:oBjXskXXzhdDRXZLHhSsrxSXOD+9y4vBCz+Zn/1X6xp0+YgGz4TYUPp7wHfe3GMr:Cj8kXXzhpF5HhSsrxSXh9y4vBAen/1XU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2264cf077068f09d568ae109adb613d2_JaffaCakes118

Files

2264cf077068f09d568ae109adb613d2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8f787730bd1c0ace1216e4adf5cb09da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\coretech\source\kimi\svg\public\libraries\windows\release\dynamic\SVGCore.pdb

Imports

ace

ord3
ord2
ord4

agm

ord4
ord3

bib

ord5
ord4
ord11

cooltype

ord3
ord1

winmm

mmioSetInfo
mmioSeek
mmioDescend
mmioRead
mmioOpenA
mmioAdvance
mmioGetInfo
mmioClose

kernel32

ReleaseMutex
GetSystemDirectoryA
SetEnvironmentVariableA
CompareStringW
GetProcAddress
LoadLibraryA
FreeLibrary
GetTempPathA
CreateDirectoryA
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CreateEventA
CloseHandle
SetEvent
WaitForSingleObject
CreateMutexA
GetLocaleInfoA
OutputDebugStringA
DisableThreadLibraryCalls
SetThreadPriority
CreateThread
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceFrequency
QueryPerformanceCounter
MapViewOfFile
GetSystemInfo
CreateFileMappingA
GetFileSize
UnmapViewOfFile
InterlockedIncrement
Sleep
GetLastError
InterlockedDecrement
MultiByteToWideChar
ResetEvent
GetVersionExA
GetACP
GetUserDefaultLCID
WideCharToMultiByte
CompareStringA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetCurrentThreadId
IsValidLocale
EnumSystemLocalesA
GetModuleFileNameA
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
GetTimeZoneInformation
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapReAlloc
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
SetEndOfFile
GetTimeFormatA
GetDateFormatA
SetLastError
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
HeapSize
GetStdHandle
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetCurrentProcessId
VirtualAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

user32

wsprintfA
GetKeyboardLayout

ole32

CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

DllMain
SOMPackageGetEntryPoints

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 604KB - Virtual size: 602KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8f787730bd1c0ace1216e4adf5cb09da

Headers

File Characteristics

PDB Paths

Imports

ace

agm

bib

cooltype

winmm

kernel32

user32

ole32

advapi32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 604KB - Virtual size: 602KB

.data Size: 132KB - Virtual size: 267KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 196KB - Virtual size: 194KB

.text Size: 200KB - Virtual size: 200KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 604KB - Virtual size: 602KB

.data
Size: 132KB - Virtual size: 267KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 196KB - Virtual size: 194KB

.text
Size: 200KB - Virtual size: 200KB