7449b51e24fdc42d4f2333c2b11dfe46_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7449b51e24fdc42d4f2333c2b11dfe46_JaffaCakes118
Size

383KB
MD5

7449b51e24fdc42d4f2333c2b11dfe46
SHA1

61b7ffbda825fdffb0a84f92c18d7418731e8bed
SHA256

527b6d68f1d1d78376480e02e98b1f6600ad87a6f0a31589ea45ab57ae8efead
SHA512

3a07036e6e0dd8615cfe1466a028334a5042cee188df95eb73079820a096f8c8dd64711dfbb488836b700bb4645c5e4916b24f0e9cb8c8df9842b47a3578f6b4
SSDEEP

6144:nWteGEC/Zk2NiU32HRQXF4YGvzm2GSOlYkbYFjptCJBWqv/VWHM9dkT/Qkazv4Ey:W7l0RPYJxekbujnCPn1P9dkrQkazv4Ey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7449b51e24fdc42d4f2333c2b11dfe46_JaffaCakes118

Files

7449b51e24fdc42d4f2333c2b11dfe46_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Exports

Exports

kdfAutoStart
kdfAutoStartClean
kdfAutoStartCleanB
kdfAutoStartCleanD
kdfAutoStartV
kdfAutoStart_h
kdfCkeckKeylogger
kdfExProtect
kdfGetVersion
kdfSelfCheckIntegrity
kdfSetFlashE2E_INJ
kdfSetImageDir
kdfWebBrowserContextMenu
kdfWebBrowserHandleAdd
kdfWebBrowserHandleRemove

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tz7swqlm
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

88trcjpb
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

d97nn6vo
Size: 624KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sutgvja0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f433e7fcc51e68080022754836705744

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: - Virtual size: 80KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: - Virtual size: 32KB

.rsrc Size: 4KB - Virtual size: 1.2MB

tz7swqlm Size: - Virtual size: 12KB

88trcjpb Size: - Virtual size: 60KB

d97nn6vo Size: 624KB - Virtual size: 628KB

sutgvja0 Size: 4KB - Virtual size: 4KB

.text
Size: - Virtual size: 80KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: - Virtual size: 32KB

.rsrc
Size: 4KB - Virtual size: 1.2MB

tz7swqlm
Size: - Virtual size: 12KB

88trcjpb
Size: - Virtual size: 60KB

d97nn6vo
Size: 624KB - Virtual size: 628KB

sutgvja0
Size: 4KB - Virtual size: 4KB