6a8f4ff3eaada47cc47910fb6ececace_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6a8f4ff3eaada47cc47910fb6ececace_JaffaCakes118
Size

84KB
MD5

6a8f4ff3eaada47cc47910fb6ececace
SHA1

2f5428476abd9f0708dafe54df5d9761a60d23ea
SHA256

3cfea6eec2d1c5bcc52d071345b66d5820e536ab53140fb7045fc59c58307e48
SHA512

e8e40a89c1b414c5b065eb4770a7dfb7c86aff0618d6e675652de41d57426df26615744b73fcc0c412133d2261735a27f4586151b0f709459dfa9a7e33949ece
SSDEEP

1536:nAlnsh1wmmLwTLPvHSj4QDDbSXlY8dt9vKEpgoO6booJKpiIaJ9:AqNmLcnGiGKGG/i49

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a8f4ff3eaada47cc47910fb6ececace_JaffaCakes118

Files

6a8f4ff3eaada47cc47910fb6ececace_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7ddb7d49c01e83c49c23de24ec01c54a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

_ismbbkana
is_wctype
_baseversion_dll
__GetMainArgs
_execve
_fullpath
rewind
_mbsnbcmp
fabs
_mbsicmp
_strset
_putenv
_cscanf

kernel32

GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedFlushSList
SetEndOfFile
GetCurrentThreadId
OpenJobObjectW
GetPrivateProfileSectionW
GetCurrentProcessId
BaseCleanupAppcompatCacheSupport
VirtualAlloc
GetSystemDefaultLangID
lstrcmpi
GetAtomNameW
lstrlenA
GetProcessHeap
CallNamedPipeW
TlsFree
GetTickCount
FindNextVolumeA
GetLogicalDriveStringsA
MoveFileWithProgressW
SetHandleInformation
LoadLibraryA

glmf32

glsCopyStream
glsDataPointer
glsReadFunc
glsNumul
glsWriteFunc
glsGetStreamType
glsGetCommandAttrib
glsGetHeaderfv
glsUCS4toUTF8
glsUTF8toUCS4
__glsParser_create
glsNuml
glsHeaderi
glsNumd

atl

AtlModuleAddTermFunc
AtlIPersistStreamInit_Load
AtlUnadvise
AtlAxCreateDialogW
AtlModuleInit
AtlAxDialogBoxA
AtlModuleRevokeClassObjects
AtlAxCreateDialogA
DllGetClassObject
AtlInternalQueryInterface
DllUnregisterServer
AtlUnmarshalPtr
AtlDevModeW2A
AtlComQIPtrAssign
AtlAxGetControl
AtlIPersistPropertyBag_Load
AtlGetObjectSourceInterface

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ddb7d49c01e83c49c23de24ec01c54a

Headers

DLL Characteristics

File Characteristics

Imports

crtdll

kernel32

glmf32

atl

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 17KB - Virtual size: 25KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 308B

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 17KB - Virtual size: 25KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 308B