226cbc3dc55982d0e83a275e8c82ee57_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

226cbc3dc55982d0e83a275e8c82ee57_JaffaCakes118
Size

3.1MB
MD5

226cbc3dc55982d0e83a275e8c82ee57
SHA1

8a332bd1f2504979c4fa648cf66edda6fe80f956
SHA256

5bbb94ffab8d2c5c79dd2285d4a19caf6bfe886a0e6450c3555314911ff03ebc
SHA512

1316d9854000340e375c7dfd166f5d26dae9910e3454a7a4a175b5f4e2faeb32a8d187e5fe89d72ef50a15348510a0e4aeb652a4bb35c2eb94dad3e16d4e4321
SSDEEP

98304:2j8kXXzhpF5HhSsrxSXh9y4vBAen/1X6xp0+YgGz4TYUPp7wHfe+IgmOR3i:zknzhpFIy4vVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
226cbc3dc55982d0e83a275e8c82ee57_JaffaCakes118

Files

226cbc3dc55982d0e83a275e8c82ee57_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8f787730bd1c0ace1216e4adf5cb09da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\coretech\source\kimi\svg\public\libraries\windows\release\dynamic\SVGCore.pdb

Imports

ace

ord3
ord2
ord4

agm

ord4
ord3

bib

ord5
ord4
ord11

cooltype

ord3
ord1

winmm

mmioSetInfo
mmioSeek
mmioDescend
mmioRead
mmioOpenA
mmioAdvance
mmioGetInfo
mmioClose

kernel32

ReleaseMutex
GetSystemDirectoryA
SetEnvironmentVariableA
CompareStringW
GetProcAddress
LoadLibraryA
FreeLibrary
GetTempPathA
CreateDirectoryA
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CreateEventA
CloseHandle
SetEvent
WaitForSingleObject
CreateMutexA
GetLocaleInfoA
OutputDebugStringA
DisableThreadLibraryCalls
SetThreadPriority
CreateThread
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceFrequency
QueryPerformanceCounter
MapViewOfFile
GetSystemInfo
CreateFileMappingA
GetFileSize
UnmapViewOfFile
InterlockedIncrement
Sleep
GetLastError
InterlockedDecrement
MultiByteToWideChar
ResetEvent
GetVersionExA
GetACP
GetUserDefaultLCID
WideCharToMultiByte
CompareStringA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetCurrentThreadId
IsValidLocale
EnumSystemLocalesA
GetModuleFileNameA
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
GetTimeZoneInformation
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapReAlloc
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
SetEndOfFile
GetTimeFormatA
GetDateFormatA
SetLastError
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
HeapSize
GetStdHandle
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetCurrentProcessId
VirtualAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

user32

wsprintfA
GetKeyboardLayout

ole32

CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

DllMain
SOMPackageGetEntryPoints

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 604KB - Virtual size: 602KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8f787730bd1c0ace1216e4adf5cb09da

Headers

File Characteristics

PDB Paths

Imports

ace

agm

bib

cooltype

winmm

kernel32

user32

ole32

advapi32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 604KB - Virtual size: 602KB

.data Size: 132KB - Virtual size: 267KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 196KB - Virtual size: 194KB

.text Size: 376KB - Virtual size: 376KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 604KB - Virtual size: 602KB

.data
Size: 132KB - Virtual size: 267KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 196KB - Virtual size: 194KB

.text
Size: 376KB - Virtual size: 376KB