2522599c7966314af970cc0df6ac7a62_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2522599c7966314af970cc0df6ac7a62_JaffaCakes118
Size

60KB
MD5

2522599c7966314af970cc0df6ac7a62
SHA1

0755deb6412c8b11ac7716914482352c9db711aa
SHA256

6ef5e6aff4baaae0039c8e5b8fcf612b9b8df48c57831a3b352c267fdf1a57fd
SHA512

ee2770978d9e651437e56cfeb7542992cd602d1800cfde401772fcab3d2cd3658942f36822a47184b85d6258632e6379b730d3dba99e214dbbbce68639c6af27
SSDEEP

768:SoKJl3gLfiXe3g2rh74SGZQ4tGS/sz3Q2tO2vhka9p8H+1gYxKEaU+df+mk:SpQj3g22Z1lD24iqH+1gYxf+Z+mk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2522599c7966314af970cc0df6ac7a62_JaffaCakes118

Files

2522599c7966314af970cc0df6ac7a62_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b27b0ded8f73bbf01541cd3155548518

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

alleg40

ord119
ord159
ord252
ord245
ord549
ord643
ord498
ord61
ord365

msvcrt

_adjust_fdiv
_initterm
_CIpow
exit
_ftol
malloc
free

kernel32

DisableThreadLibraryCalls

Exports

Exports

almp3_adjust_mp3
almp3_adjust_mp3stream
almp3_create_mp3
almp3_create_mp3stream
almp3_create_sample_from_mp3
almp3_destroy_mp3
almp3_destroy_mp3stream
almp3_free_mp3stream_buffer
almp3_get_audiostream_mp3
almp3_get_audiostream_mp3stream
almp3_get_bitrate_mp3
almp3_get_bitrate_mp3stream
almp3_get_layer_mp3
almp3_get_layer_mp3stream
almp3_get_length_bytes_mp3
almp3_get_length_bytes_mp3stream
almp3_get_length_frames_mp3
almp3_get_length_frames_mp3stream
almp3_get_length_msecs_mp3
almp3_get_length_msecs_mp3stream
almp3_get_length_secs_mp3
almp3_get_length_secs_mp3stream
almp3_get_mp3stream_buffer
almp3_get_msecs_per_frame_mp3
almp3_get_msecs_per_frame_mp3stream
almp3_get_output_wave_mp3stream
almp3_get_pos_bytes_mp3
almp3_get_pos_bytes_mp3stream
almp3_get_pos_frames_mp3
almp3_get_pos_frames_mp3stream
almp3_get_pos_msecs_mp3
almp3_get_pos_msecs_mp3stream
almp3_get_pos_secs_mp3
almp3_get_pos_secs_mp3stream
almp3_get_wave_bits_mp3
almp3_get_wave_bits_mp3stream
almp3_get_wave_freq_mp3
almp3_get_wave_freq_mp3stream
almp3_get_wave_is_stereo_mp3
almp3_get_wave_is_stereo_mp3stream
almp3_is_looping_mp3
almp3_is_playing_mp3
almp3_is_playing_mp3stream
almp3_play_ex_mp3
almp3_play_ex_mp3stream
almp3_play_mp3
almp3_play_mp3stream
almp3_poll_mp3
almp3_poll_mp3stream
almp3_rewind_mp3
almp3_seek_abs_bytes_mp3
almp3_seek_abs_bytes_mp3stream
almp3_seek_abs_frames_mp3
almp3_seek_abs_frames_mp3stream
almp3_seek_abs_msecs_mp3
almp3_seek_abs_msecs_mp3stream
almp3_seek_abs_secs_mp3
almp3_seek_abs_secs_mp3stream
almp3_seek_rel_bytes_mp3
almp3_seek_rel_bytes_mp3stream
almp3_seek_rel_frames_mp3
almp3_seek_rel_frames_mp3stream
almp3_seek_rel_msecs_mp3
almp3_seek_rel_msecs_mp3stream
almp3_seek_rel_secs_mp3
almp3_seek_rel_secs_mp3stream
almp3_start_autopoll_mp3
almp3_start_autopoll_mp3stream
almp3_stop_autopoll_mp3
almp3_stop_autopoll_mp3stream
almp3_stop_mp3
almp3_stop_mp3stream

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b27b0ded8f73bbf01541cd3155548518

Headers

File Characteristics

Imports

alleg40

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 160KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 160KB

.reloc
Size: 4KB - Virtual size: 1KB