5deefba8e0d124d4657676401fcc3b0e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5deefba8e0d124d4657676401fcc3b0e_JaffaCakes118
Size

114KB
MD5

5deefba8e0d124d4657676401fcc3b0e
SHA1

b15919535664923cd9bab5da5c35712cbae83d2f
SHA256

67cb37fbc943ebaaf8aa0b64aa0de708942267d9d8759542cdcc888a2927c90d
SHA512

fb5027a6bf60d91d91ddf9449ae9ef3f9daf525dcf767462c6fe475e8b94696c6932f39d45f57e0e1512add9e35ebcf170bc59d0638f952dc4aa4dc18c40e3b2
SSDEEP

3072:xjWHzT+zlu4dZI1B2kNWH/Rgz8qz+n6DeLto:V8zTWuYMQkkH/R3KOLLt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5deefba8e0d124d4657676401fcc3b0e_JaffaCakes118

Files

5deefba8e0d124d4657676401fcc3b0e_JaffaCakes118
.dll windows:6 windows x64 arch:x64

9aa873cc39ccd5d97036b08309229d51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

rpcrt4

NdrServerCall2

kernel32

InitializeCriticalSectionAndSpinCount
CloseHandle
FreeLibrary
GetModuleHandleW
LoadLibraryW
GetProcAddress
FindNextFileW
CreateThread
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
HeapFree
HeapAlloc
EncodePointer
DecodePointer
RtlPcToFileHeader
RaiseException
SetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateFileW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwindEx
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
HeapReAlloc
OutputDebugStringW
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9aa873cc39ccd5d97036b08309229d51

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

kernel32

Sections

.text Size: 63KB - Virtual size: 62KB

.rdata Size: 37KB - Virtual size: 37KB

.data Size: 6KB - Virtual size: 16KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 63KB - Virtual size: 62KB

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 6KB - Virtual size: 16KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 2KB