3cec7ab3ae23dcfb0ae52961ce70e729_JaffaCakes118

General

Target

3cec7ab3ae23dcfb0ae52961ce70e729_JaffaCakes118
Size

37KB
MD5

3cec7ab3ae23dcfb0ae52961ce70e729
SHA1

dc4059c314e4c7285b7ac286e127efd45cfe1359
SHA256

571013b9f3ec39250d96b258d8b055f4ba3356d6de79166fccacd74dc28d2ffe
SHA512

f0ee5740ef69472908b869d14be10414e608f0cfadc4e9e589ef39a5764fc89ac7a59d0f4876a89bcb0debe0fa7e5da3383cca034f90391700877248c132f4a6
SSDEEP

768:EXG8U6VRT6qyq8Z32sW9u8cP7EnkfJu8k:EXG8UuazZjbfc8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cec7ab3ae23dcfb0ae52961ce70e729_JaffaCakes118

Files

3cec7ab3ae23dcfb0ae52961ce70e729_JaffaCakes118
.dll windows:6 windows x86 arch:x86

e9f86d51e7d84fa7f2caf55ed5a6c9cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memcmp
memcpy
memset
_strnicmp
??1type_info@@UAE@XZ
strrchr
isdigit
_beginthread
strncmp
_itoa
fwrite
printf
atoi
fseek
ftell
fread
fopen
fclose
_strdup
isalnum
strchr
strstr
sprintf
tmpfile
realloc
free
??2@YAPAXI@Z
_iob
??3@YAXPAX@Z
fprintf
strncpy
memchr
malloc

psapi

GetModuleInformation

crypt32

CertGetIssuerCertificateFromStore
CertFreeCertificateContext
CertVerifyCertificateChainPolicy
CertNameToStrA
CertGetCertificateChain
CertOpenSystemStoreA
CertFreeCertificateChain
CertCloseStore
CertFindChainInStore

secur32

InitializeSecurityContextA
AcquireCredentialsHandleA
FreeContextBuffer
DecryptMessage
ApplyControlToken
QueryContextAttributesA
FreeCredentialsHandle
EncryptMessage
DeleteSecurityContext

kernel32

GetFileAttributesA
VirtualProtect
lstrcmpiW
GetModuleFileNameA
WinExec
lstrcmpA
GetProcAddress
OpenMutexA
CreateMutexA
CloseHandle
lstrlenA
Sleep
GlobalFree
OutputDebugStringA
MultiByteToWideChar
GetLastError
CreateFileA
GetModuleHandleW
WriteFile
GetCommandLineA
WideCharToMultiByte
GlobalAlloc
GetCurrentProcess

advapi32

RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9f86d51e7d84fa7f2caf55ed5a6c9cc

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

psapi

crypt32

secur32

kernel32

advapi32

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB