37960b803c6b3460d49b971ce83a0484_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

37960b803c6b3460d49b971ce83a0484_JaffaCakes118
Size

364KB
MD5

37960b803c6b3460d49b971ce83a0484
SHA1

12580f884747012387d14589d28a3294449e5fcf
SHA256

dab9e11fbaa4f0c18dc951284086058d95ed37d3bdd8acd1850738833788ab50
SHA512

fc2509fa9828813110218bdae9a0869859fdaa66a6f3ed84826f1df3e72942ed31596850bfddc80d2579b1130b6ae4106ddc93c0ae82c75a3f019b3a9d068972
SSDEEP

6144:VD1z2S3xV9W1YMzj8ucWMNWXSiuGMgAd2Vm1tf2dyTfHCIP:VD4eFaj85sXSiuGTAd2VItuYfHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37960b803c6b3460d49b971ce83a0484_JaffaCakes118

Files

37960b803c6b3460d49b971ce83a0484_JaffaCakes118
.dll windows:4 windows x86 arch:x86

406aab623baee7b7f4118ccd559869e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcr71

__dllonexit
_beginthreadex
_close
_errno
_lseeki64
_open
_read
_stat
_stati64
_telli64
_wfopen
_wopen
_wstat
_wstati64
ceil
fclose
fflush
fgets
floor
fopen
fread
free
fseek
ftell
fwrite
log10
malloc
memcpy
memset
printf
sprintf
strcat
strcmp
strcpy
strrchr
swprintf
vsprintf
wcscat
wcscmp
wcscpy
wcslen
wcsrchr

kernel32

CloseHandle
CreateSemaphoreA
FreeLibrary
GetModuleFileNameA
GetProcAddress
GetSystemInfo
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
ReleaseSemaphore
SetThreadAffinityMask
Sleep
WaitForSingleObject

Exports

Exports

mpegInClose
mpegInCloseExisting
mpegInCloseMPEG
mpegInCloseSecondary
mpegInFree
mpegInGetInfo
mpegInGetLastErrString
mpegInGetNextCodedFrame
mpegInGetNextFrame
mpegInGetNextFrameExisting
mpegInGetNextFrameTS
mpegInGetNextSample
mpegInGetNextSampleExisting
mpegInGetNextSampleTS
mpegInInfoInit
mpegInInitTS
mpegInNew
mpegInOpen
mpegInOpenExisting
mpegInOpenMPEG
mpegInOpenMPEGIdx
mpegInOpenMPEGIdxW
mpegInOpenPrimary
mpegInOpenSecondary
mpegInOpenTSFile
mpegInOpenTSFileW
mpegInOpenTSStream
mpegInOpenW
mpegInSaveIdx
mpegInSaveIdxW
mpegInSeekFrame
mpegInSeekFrameExisting
mpegInSeekFrameTS
mpegInSeekSample
mpegInSeekSample64
mpegInSeekSample64TS
mpegInSeekSampleExisting
mpegInSeekSampleTS
mpegInSleepFiles
mpegInUpdateFiles
mpegInWakeFiles
mpegSplit
mpegSplitClose
mpegSplitGetInfo
mpegSplitInitTS
mpegSplitOpenFile
mpegSplitOpenFileTSFile
mpegSplitOpenFileTSFileW
mpegSplitOpenFileTSStream
mpegSplitOpenStream
mpegSplitSeekByte
mpegSplitSeekByteTS
mpegSplitSeekFrame
mpegSplitSeekSample
mpegSplitSeekTime
mpegSplitSeekTimeTS

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

406aab623baee7b7f4118ccd559869e7

Headers

File Characteristics

Imports

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 318KB - Virtual size: 318KB

.data Size: 20KB - Virtual size: 20KB

.rdata Size: 12KB - Virtual size: 12KB

.bss Size: - Virtual size: 2.1MB

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 318KB - Virtual size: 318KB

.data
Size: 20KB - Virtual size: 20KB

.rdata
Size: 12KB - Virtual size: 12KB

.bss
Size: - Virtual size: 2.1MB

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB