334304a36e2a8d3f66eaaa8a2f603042_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

334304a36e2a8d3f66eaaa8a2f603042_JaffaCakes118
Size

626KB
MD5

334304a36e2a8d3f66eaaa8a2f603042
SHA1

ca1b31abac1f1d82c31dd8be53af3ac2771638d5
SHA256

d96ca9d493c0704b11eac45db2074b92ec3b07a13aeed06a7984174a0d7e46a0
SHA512

107814900a85cf30d008e219270eb5e17d933da9627b7a911f8f529aace61d62eaf70b3bdea54fa50c99a555e81b4bcd6adc22578dc32bd1ebd84eb5678cd282
SSDEEP

12288:5z+jUAg36H9znp4dXUdLGJimBGGWFK5+Vh0eVrkjhoNSJEsld:R+IAg6m0GWRwJEsld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
334304a36e2a8d3f66eaaa8a2f603042_JaffaCakes118

Files

334304a36e2a8d3f66eaaa8a2f603042_JaffaCakes118
.dll windows:4 windows x86 arch:x86

96a63592d7cc07e0f6f1b89780997d3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcr71

__dllonexit
_errno
abort
atan
fflush
floor
free
malloc
memcpy
memset
sprintf
strcpy

kernel32

AddAtomA
FindAtomA
GetAtomNameA

user32

MessageBoxA

Exports

Exports

free_audio_decoder
get_audio_header
get_audio_samples
get_audio_state
init_audio_decoder
new_audio_decoder
open_MPEGin_Audio_stream
open_MPEGin_Audio_stream_ex
open_MPEGin_Subpic_stream
open_MPEGin_Video_stream
open_MPEGin_Video_stream_ex
reset_audio_decoder

Sections

.text
Size: 548KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96a63592d7cc07e0f6f1b89780997d3e

Headers

File Characteristics

Imports

msvcr71

kernel32

user32

Exports

Exports

Sections

.text Size: 548KB - Virtual size: 548KB

.data Size: 53KB - Virtual size: 53KB

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 4KB

.edata Size: 512B - Virtual size: 436B

.idata Size: 1024B - Virtual size: 548B

.rsrc Size: 1024B - Virtual size: 1020B

.reloc Size: 18KB - Virtual size: 17KB

.text
Size: 548KB - Virtual size: 548KB

.data
Size: 53KB - Virtual size: 53KB

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 436B

.idata
Size: 1024B - Virtual size: 548B

.rsrc
Size: 1024B - Virtual size: 1020B

.reloc
Size: 18KB - Virtual size: 17KB