5e92d2c05889383f358e6a1c48568432_JaffaCakes118

General

Target

5e92d2c05889383f358e6a1c48568432_JaffaCakes118
Size

29KB
MD5

5e92d2c05889383f358e6a1c48568432
SHA1

a16c710e8b5ae014ad021bfa3228918057926d31
SHA256

1de40551f5679ea1b818e571db3855ee6390c1afb90fe739e311433fbedb6538
SHA512

72ee5083ee86a2afa92a43237e0c8571516ec7ec1e234be50ed4b7d4798cc5b837a590c3dd597a77c944f8a1acda55325b2db9075efbdc4c606b112724fbd7e6
SSDEEP

768:MrAtFnrrF2nhVdEQ/DmvZ//zVp6tVHruaQNfq:Mr6FnV8VvqeV8Vq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e92d2c05889383f358e6a1c48568432_JaffaCakes118

Files

5e92d2c05889383f358e6a1c48568432_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cb4856a28bebf51ca6d8da86fd082bac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

crtdll

fwrite

Exports

Exports

adler32
compress
compress2
crc32
deflate
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflateReset
deflateSetDictionary
get_crc_table
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzwrite
inflate
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
unzClose
unzCloseCurrentFile
unzGetCurrentFileInfo
unzGetGlobalComment
unzGetGlobalInfo
unzGetLocalExtrafield
unzGoToFirstFile
unzGoToNextFile
unzLocateFile
unzOpen
unzOpen2
unzOpenCurrentFile
unzOpenCurrentFile2
unzReadCurrentFile
unzStringFileNameCompare
unzeof
unztell
zError
zipClose
zipCloseFileInZip
zipCloseFileInZipRaw
zipOpen
zipOpenNewFileInZip
zipOpenNewFileInZip2
zipWriteInFileInZip
zlibVersion

Sections

.text
Size: 21KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cb4856a28bebf51ca6d8da86fd082bac

Headers

File Characteristics

Imports

kernel32

crtdll

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 64KB

.rsrc Size: 6KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 512B

.text
Size: 21KB - Virtual size: 64KB

.rsrc
Size: 6KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 512B