78b5d15c441f935d4ec32b1534e02027_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

78b5d15c441f935d4ec32b1534e02027_JaffaCakes118
Size

68KB
MD5

78b5d15c441f935d4ec32b1534e02027
SHA1

0071dd0f03218b368cfafca86a53ec61c8f37b57
SHA256

ca07de032c83f94dca5d4e3eabfb9a76a5391de097740d398100cb91e875199b
SHA512

6b763366b553b5231d97fa88c71837f66f67217647a4754ee1445fce21dbf59ce4226399f5175711f7a0a19fc99a31916b200b521f299f86f52f92fb76c6394a
SSDEEP

768:fb9lE9x/tHCTn7BWJ2uBTbnCzwiVD39VY3VkoYF9l6JMCAPK9Zp7l:fhyN5+n7BI2uTwhy3VkjF9lR67l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78b5d15c441f935d4ec32b1534e02027_JaffaCakes118

Files

78b5d15c441f935d4ec32b1534e02027_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7e41369cc90935168513a5d0804b96d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
MultiByteToWideChar
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
TerminateProcess
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
LCMapStringA
LCMapStringW
GetLastError
FlushFileBuffers
RtlUnwind
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetLocaleInfoW
SetFilePointer
CloseHandle
SetStdHandle

Exports

Exports

idn_free
idna_to_ascii_16z
idna_to_ascii_4i
idna_to_ascii_4z
idna_to_ascii_8z
idna_to_ascii_lz
idna_to_unicode_44i
idna_to_unicode_4z4z
idna_to_unicode_8z4z
idna_to_unicode_8z8z
idna_to_unicode_8zlz
idna_to_unicode_lz16z
idna_to_unicode_lzlz
punycode_decode
punycode_encode
stringprep
stringprep_4i
stringprep_4zi
stringprep_check_version
stringprep_convert
stringprep_locale_charset
stringprep_locale_to_utf8
stringprep_profile
stringprep_ucs4_nfkc_normalize
stringprep_ucs4_to_utf16
stringprep_ucs4_to_utf8
stringprep_unichar_to_utf8
stringprep_utf16_to_ucs4
stringprep_utf8_nfkc_normalize
stringprep_utf8_to_locale
stringprep_utf8_to_ucs4
stringprep_utf8_to_unichar

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e41369cc90935168513a5d0804b96d3

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 4KB - Virtual size: 3KB