2db4af9c2ea84e64a965f5245ef49236_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2db4af9c2ea84e64a965f5245ef49236_JaffaCakes118
Size

76KB
MD5

2db4af9c2ea84e64a965f5245ef49236
SHA1

240432f57c00b98e25cb76791d472a7005c4530e
SHA256

5362cc2a1fcad102c43e6d767aa13c0e548444a36273504d64546967e777e8f0
SHA512

6a1920ed927245bca8e8c71ffee3f7cac634eaa28d1fe44023aa1359bdd9cdac54ef32b22621db73ecefea9cf362a1ab198f229e03a49626d56e9515be7ae5ee
SSDEEP

768:faCwQlb2PbhM1j1nFjlHdeUNjWEOMVBMXB239UWrVTXKpVsJOOWS81kj6AD9lrw:iCJb2jhOBlnvNjBOMj4B23PK0JOvjUQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2db4af9c2ea84e64a965f5245ef49236_JaffaCakes118

Files

2db4af9c2ea84e64a965f5245ef49236_JaffaCakes118
.dll windows:4 windows x86 arch:x86

39c96b059a55ae28c64090f0410427a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

SetUnhandledExceptionFilter
InterlockedIncrement
GetACP
DeleteFileW
GetLastError
SetFilePointer
DeleteFileA
GetEnvironmentStrings
LocalAlloc
InterlockedExchange
GetStringTypeW
GetFullPathNameA
SetLastError
GetProcAddress
GetCurrentThreadId
GetEnvironmentVariableA
TerminateProcess
GetOEMCP
CompareFileTime
lstrcmpiA
ReleaseMutex
GetFullPathNameW
FreeEnvironmentStringsW
FlushViewOfFile
IsDBCSLeadByte
SetEvent
HeapDestroy
EnterCriticalSection
UnhandledExceptionFilter
HeapCreate
GetCPInfo
TlsGetValue
LeaveCriticalSection
LCMapStringA
OpenFileMappingW
CreateMutexA
DisableThreadLibraryCalls
GetLocaleInfoA
LoadLibraryA
FreeEnvironmentStringsA
SetEndOfFile
CreateMutexW
DeleteCriticalSection
InitializeCriticalSection
MoveFileA
WriteFile
GetDiskFreeSpaceA
GetVersionExA
MoveFileW
CloseHandle
CreateFileA
OpenFileMappingA
VirtualProtect
lstrlenA
GetStringTypeExA
MapViewOfFile
GetEnvironmentStringsW
VirtualAlloc
LocalFree
GetDiskFreeSpaceW
GetFileType
HeapAlloc
lstrcmpA
VirtualQuery
HeapReAlloc
GetStartupInfoA
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
Sleep
lstrlenW
GetFileSize
CreateFileMappingA
InterlockedDecrement
GetSystemInfo
CreateThread
GetSystemTimeAsFileTime
CreateFileMappingW
GetStdHandle
GetStringTypeA
UnmapViewOfFile
GetTickCount
SetFileTime
CreateFileW
SetHandleCount
FreeLibrary
HeapFree
GetCurrentProcess
WaitForSingleObject
VirtualFree
CreateEventA
QueryPerformanceCounter
GetCurrentProcessId
MultiByteToWideChar
TlsAlloc
IsBadReadPtr
TlsFree
EnumDateFormatsExA

Exports

Exports

xbeiwc

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39c96b059a55ae28c64090f0410427a0

Headers

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 36KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 548B

.text
Size: 40KB - Virtual size: 36KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 548B