3258b5d0371dfe4c3e86abfa3afb3efe_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3258b5d0371dfe4c3e86abfa3afb3efe_JaffaCakes118
Size

78KB
MD5

3258b5d0371dfe4c3e86abfa3afb3efe
SHA1

d77defbad0c89ec39d04cca4f6c105affcacdb50
SHA256

0cd3cbeae21e977586287617e73d04f26de0df4e9a7f15a5293888f7f887e185
SHA512

ea79fe513e4a394f4b8c1c4eff3e1c8ed7f6aee4ab2a739a646c6c67ce9063b9176338b90f7e0d1c4b71ec2194a3805d8c6c803076b5ca26c34f2245a986c4a4
SSDEEP

1536:TkgDW0KqUojXDS9omVhT1Rl8npN1kUCmefDH7RHLoVtw3woZNVWpvmhuQlhViP:NDWkjXDSRB1kpNKUCm4AtsZZNafzP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3258b5d0371dfe4c3e86abfa3afb3efe_JaffaCakes118

Files

3258b5d0371dfe4c3e86abfa3afb3efe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

52d51d45b496b71535ed57fbacba5a65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WritePrivateProfileStringA
EnterCriticalSection
LeaveCriticalSection
SearchPathA
DebugBreak
HeapAlloc
UnmapViewOfFile
GetFileAttributesA
CreateFileMappingA
SetEndOfFile
WideCharToMultiByte
GetModuleHandleA
GetProcAddress
GetFileAttributesW
GetVersion
MultiByteToWideChar
SetUnhandledExceptionFilter
lstrcpyW
GetLastError
InterlockedDecrement
lstrcmpiW
LoadLibraryW
GetModuleFileNameW
OutputDebugStringA
lstrcpynW
LoadLibraryExW
lstrcatW
FreeLibrary
lstrlenA
SizeofResource
LoadResource
FindResourceW
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CreateFileA
HeapFree
CloseHandle
SetLastError
GetDriveTypeA
InterlockedExchange
Sleep
InterlockedCompareExchange
GetCommandLineA
VirtualProtect
VirtualFree
lstrlenW
VirtualAlloc

user32

CharPrevW
CharLowerA
GetDlgItem
InvalidateRect
LoadCursorW
wsprintfA
CharNextW
SetCursor
MessageBoxA

advapi32

RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
RegQueryInfoKeyA
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW

gdi32

SelectObject
GetTextMetricsA
DeleteObject
DeleteDC
CreateDCA
CreateFontIndirectA

ole32

StringFromGUID2

msvcr71

_mbsnextc
_ismbcspace
isalpha
strncpy
_mbsncpy
__CppXcptFilter
_onexit
__dllonexit
_mbsinc
_mbschr
_ismbblead
_except_handler3
free
_XcptFilter
memmove
_adjust_fdiv
wcschr
_initterm
_mbsdec
_ismbcalpha
_mbsrchr
wcslen
_mbslen
_mbsnicmp
_mbsicmp
malloc

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52d51d45b496b71535ed57fbacba5a65

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

msvcr71

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 36KB - Virtual size: 69KB

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 36KB - Virtual size: 69KB

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB