35acd626193e446b6755bf4980e94c59_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

35acd626193e446b6755bf4980e94c59_JaffaCakes118
Size

236KB
MD5

35acd626193e446b6755bf4980e94c59
SHA1

8312811404fb5588a08f2da67b6836b402fc7d17
SHA256

e165782d0039ed1f9c9bb5a2cafeb90a0c88309ad3f383d41729f40f8a6616e8
SHA512

bf70eae623075ac048269b1b7858ac8a93ba505627e87e776e3be0bf1299b03a9e1a53c03c5635e0cd2279771da12d49863be4703d33ac81652bea28b84e6f5e
SSDEEP

3072:JXlCHEpZ2CNxCe12dT0ue7Lon5QwZBLszDAUzk5+TH:J1CHavNce1+T07K5Q8B4nAUQ5W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35acd626193e446b6755bf4980e94c59_JaffaCakes118

Files

35acd626193e446b6755bf4980e94c59_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4e906bea9e834949ab4346d54426243a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapReAlloc
LocalFree
AllocConsole
GetStdHandle
GetEnvironmentVariableA
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
CloseHandle
WaitForSingleObject
ResetEvent
SetEvent
TerminateThread
QueryPerformanceCounter
GetLastError
SetThreadIdealProcessor
SetThreadAffinityMask
GetCurrentThread
GenerateConsoleCtrlEvent
Sleep
SetThreadPriority
CreateThread
GetExitCodeThread
SetConsoleCtrlHandler
TlsSetValue
TlsGetValue
GetCurrentProcess
GetProcessAffinityMask
QueryPerformanceFrequency
LoadLibraryA
TlsAlloc
GetSystemInfo
GetProcAddress
TlsFree
SleepEx
VirtualQuery
ExitProcess
TerminateProcess
SetStdHandle
GetFileType
HeapAlloc
HeapFree
MultiByteToWideChar
FormatMessageA
GetCommandLineA
GetVersion
FlushFileBuffers
WriteFile
HeapSize
SetHandleCount
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
RtlUnwind
WideCharToMultiByte
SetEnvironmentVariableW
SetEnvironmentVariableA
GetCurrentThreadId
SetLastError
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
ReadFile

Exports

Exports

KMP_CALLOC
KMP_FREE
KMP_GET_BLOCKTIME
KMP_GET_LIBRARY
KMP_GET_NUM_KNOWN_THREADS
KMP_GET_STACKSIZE
KMP_GET_STACKSIZE_S
KMP_LOCK_COND_BROADCAST
KMP_LOCK_COND_SIGNAL
KMP_LOCK_COND_WAIT
KMP_MALLOC
KMP_NEST_LOCK_COND_BROADCAST
KMP_NEST_LOCK_COND_SIGNAL
KMP_PRINT_BANNER
KMP_REALLOC
KMP_SET_AFFINITY
KMP_SET_BLOCKTIME
KMP_SET_LIBRARY
KMP_SET_LIBRARY_SERIAL
KMP_SET_LIBRARY_THROUGHPUT
KMP_SET_LIBRARY_TURNAROUND
KMP_SET_PARALLEL_NAME
KMP_SET_STACKSIZE
KMP_SET_STACKSIZE_S
KMP_SET_STATS
KMP_SET_WARNINGS_OFF
KMP_SET_WARNINGS_ON
KMP_SHARED_CALLOC
KMP_SHARED_FREE
KMP_SHARED_MALLOC
KMP_SHARED_REALLOC
OMP_DESTROY_LOCK
OMP_DESTROY_NEST_LOCK
OMP_GET_DYNAMIC
OMP_GET_MAX_THREADS
OMP_GET_NESTED
OMP_GET_NUM_PROCS
OMP_GET_NUM_THREADS
OMP_GET_THREAD_NUM
OMP_GET_WTICK
OMP_GET_WTIME
OMP_INIT_LOCK
OMP_INIT_NEST_LOCK
OMP_IN_PARALLEL
OMP_SET_DYNAMIC
OMP_SET_LOCK
OMP_SET_NESTED
OMP_SET_NEST_LOCK
OMP_SET_NUM_THREADS
OMP_TEST_LOCK
OMP_TEST_NEST_LOCK
OMP_UNSET_LOCK
OMP_UNSET_NEST_LOCK
VT_getthid
__kmpc_atomic_4
__kmpc_atomic_8
__kmpc_atomic_fixed4_add
__kmpc_atomic_fixed8_add
__kmpc_atomic_float4_add
__kmpc_atomic_float8_add
__kmpc_barrier
__kmpc_barrier_master
__kmpc_barrier_master_nowait
__kmpc_barrier_reduce_master
__kmpc_begin
__kmpc_bound_num_threads
__kmpc_bound_thread_num
__kmpc_copyprivate
__kmpc_critical
__kmpc_destroy_lock
__kmpc_destroy_nest_lock
__kmpc_dispatch_fini_4
__kmpc_dispatch_fini_8
__kmpc_dispatch_init_4
__kmpc_dispatch_init_8
__kmpc_dispatch_next_4
__kmpc_dispatch_next_8
__kmpc_end
__kmpc_end_barrier_master
__kmpc_end_barrier_reduce_master
__kmpc_end_critical
__kmpc_end_master
__kmpc_end_ordered
__kmpc_end_serialized_parallel
__kmpc_end_single
__kmpc_end_taskq
__kmpc_end_taskq_task
__kmpc_flush
__kmpc_for_static_fini
__kmpc_for_static_init_4
__kmpc_for_static_init_8
__kmpc_fork_call
__kmpc_global_num_threads
__kmpc_global_thread_num
__kmpc_in_parallel
__kmpc_in_ssp
__kmpc_init_lock
__kmpc_init_nest_lock
__kmpc_invoke_task_func
__kmpc_master
__kmpc_ok_to_fork
__kmpc_ordered
__kmpc_pop_num_threads
__kmpc_push_num_threads
__kmpc_reduce_master_nowait
__kmpc_serialized_parallel
__kmpc_set_lock
__kmpc_set_nest_lock
__kmpc_single
__kmpc_ssp_begin
__kmpc_ssp_distance_4
__kmpc_ssp_distance_8
__kmpc_ssp_end
__kmpc_ssp_fork
__kmpc_ssp_get_max_threads
__kmpc_ssp_num_threads
__kmpc_ssp_post_4
__kmpc_ssp_post_8
__kmpc_ssp_set_max_threads
__kmpc_ssp_thread_num
__kmpc_ssp_wait_4
__kmpc_ssp_wait_8
__kmpc_task
__kmpc_task_buffer
__kmpc_taskq
__kmpc_taskq_task
__kmpc_test_lock
__kmpc_test_nest_lock
__kmpc_threadprivate
__kmpc_threadprivate_cached
__kmpc_threadprivate_register
__kmpc_threadprivate_register_vec
__kmpc_unset_lock
__kmpc_unset_nest_lock
kmp_calloc
kmp_free
kmp_get_blocktime
kmp_get_library
kmp_get_num_known_threads
kmp_get_stacksize
kmp_get_stacksize_s
kmp_lock_cond_broadcast
kmp_lock_cond_signal
kmp_lock_cond_wait
kmp_malloc
kmp_nest_lock_cond_broadcast
kmp_nest_lock_cond_signal
kmp_print_banner
kmp_realloc
kmp_set_affinity
kmp_set_blocktime
kmp_set_library
kmp_set_library_serial
kmp_set_library_throughput
kmp_set_library_turnaround
kmp_set_parallel_name
kmp_set_stacksize
kmp_set_stacksize_s
kmp_set_stats
kmp_set_warnings_off
kmp_set_warnings_on
kmp_shared_calloc
kmp_shared_free
kmp_shared_malloc
kmp_shared_realloc
kmpc_calloc
kmpc_free
kmpc_get_banner
kmpc_get_poolmode
kmpc_get_poolsize
kmpc_get_poolstat
kmpc_malloc
kmpc_poolprint
kmpc_print_banner
kmpc_realloc
kmpc_set_affinity
kmpc_set_blocktime
kmpc_set_library
kmpc_set_parallel_name
kmpc_set_poolmode
kmpc_set_poolsize
kmpc_set_stacksize
kmpc_set_stacksize_s
kmpc_set_stats
kmpc_shared_calloc
kmpc_shared_free
kmpc_shared_malloc
kmpc_shared_realloc
mpai4a
mpai8a
mpar4a
mpar8a
mpax4x
mpax8x
mpobar
mpoebr
mpofork
mpofrk
mpojoin
mpoxbr
mppadj
mppaff
mppbar
mppbeg
mppcpr
mppdeo
mppdon
mppdxo
mppebr
mppecs
mppems
mppenc
mppend
mppepa
mppesp
mppfkd
mppfork
mppfrk
mppioa
mppiws
mppjoin
mppnth
mpppqa
mpppqc
mpppqs
mpptid
mpptpa
mpptpc
mpptpz
mppvsy
mppxbr
mppxcs
mppxms
mppxnc
mppxpa
mppxpr
mppxsp
mppxth
mpsbar
mpscpr
mpsebr
mpserd
mpsfd4
mpsfd8
mpsid4
mpsid8
mpsnd4
mpsnd8
mpsont
mpsred
mpsunt
mpsxbr
mpsxrd
mptadj
mptaff
mptbar
mptdeo
mptdon
mptdxo
mptebr
mptecs
mptems
mptenc
mptepa
mptesp
mptfkd
mptppa
mptppc
mptpps
mpttpa
mpttpc
mpttpz
mptvsy
mptxbr
mptxcs
mptxms
mptxnc
mptxpa
mptxsp
omp_destroy_lock
omp_destroy_nest_lock
omp_get_dynamic
omp_get_max_threads
omp_get_nested
omp_get_num_procs
omp_get_num_threads
omp_get_thread_num
omp_get_wtick
omp_get_wtime
omp_in_parallel
omp_init_lock
omp_init_nest_lock
omp_set_dynamic
omp_set_lock
omp_set_nest_lock
omp_set_nested
omp_set_num_threads
omp_test_lock
omp_test_nest_lock
omp_unset_lock
omp_unset_nest_lock
ompc_set_dynamic
ompc_set_nested
ompc_set_num_threads
vtgthid

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e906bea9e834949ab4346d54426243a

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 111KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 16KB - Virtual size: 30KB

.data1 Size: 64KB - Virtual size: 62KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 112KB - Virtual size: 111KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 16KB - Virtual size: 30KB

.data1
Size: 64KB - Virtual size: 62KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 8KB - Virtual size: 7KB