8240267e742f08d7ea43a4ae3baca298_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8240267e742f08d7ea43a4ae3baca298_JaffaCakes118
Size

72KB
MD5

8240267e742f08d7ea43a4ae3baca298
SHA1

b4c29714fb59bb0f997a3da7cfd3e6c20920f523
SHA256

190730c4645847b4cb5ee205ad2eec022a941a505794f3e9173a01fc51314caf
SHA512

ab2ce2297c2db57e0d1a26c0e2b7fe8d9146a9faa744fb0c3af95fe32590d579ce78e3073e1b1036830c11c44a0acce0556fed73f63b0067d6b7037092530551
SSDEEP

768:1kZtqoEeCObj5HF6XVJxKAuCEdy7vdyuuNeIzhIva+zN1937Iaa0fk0NdmBq4Aj9:otYFmdHQ9Ed6XUzQzV37IXek0WBq4uJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8240267e742f08d7ea43a4ae3baca298_JaffaCakes118

Files

8240267e742f08d7ea43a4ae3baca298_JaffaCakes118
.dll windows:4 windows x86 arch:x86

510aee17469834f16b7ff01946464364

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

SetHandleCount
GetVersionExA
TlsAlloc
UnhandledExceptionFilter
GetDiskFreeSpaceA
WriteFile
EnterCriticalSection
GetStartupInfoA
GetLastError
CreateMutexW
GetFileSize
DeleteFileA
OpenFileMappingW
SetFilePointer
ReleaseMutex
GetFullPathNameA
HeapDestroy
GetProcAddress
Sleep
GetCPInfo
GetEnvironmentStringsW
LocalAlloc
SetUnhandledExceptionFilter
HeapCreate
IsDBCSLeadByte
GetStringTypeW
LCMapStringA
lstrlenA
FreeEnvironmentStringsA
GetStringTypeExA
GetSystemTimeAsFileTime
GetStringTypeA
VirtualProtect
VirtualQuery
MapViewOfFile
CreateThread
SetLastError
CreateFileA
DeleteFileW
VirtualFree
GetOEMCP
lstrlenW
SetEndOfFile
InterlockedDecrement
LoadLibraryA
GetFileType
GetLocaleInfoA
CreateEventA
HeapFree
UnmapViewOfFile
WaitForSingleObject
MultiByteToWideChar
GetEnvironmentVariableA
FreeLibrary
FlushViewOfFile
LocalFree
SetFileTime
FreeEnvironmentStringsW
MoveFileW
CreateMutexA
CloseHandle
GetSystemInfo
GetCurrentThreadId
GetEnvironmentStrings
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetACP
GetDiskFreeSpaceW
WideCharToMultiByte
CreateFileMappingA
QueryPerformanceCounter
SetEvent
TlsGetValue
DeleteCriticalSection
TlsFree
GetCurrentProcess
lstrcmpA
IsBadReadPtr
TerminateProcess
GetCurrentProcessId
MoveFileA
GetFullPathNameW
OpenFileMappingA
GetTickCount
VirtualAlloc
CompareFileTime
CreateFileMappingW
lstrcmpiA
GetStdHandle
InterlockedIncrement
InterlockedExchange
LeaveCriticalSection
CreateFileW
HeapAlloc
InitializeCriticalSection
DisableThreadLibraryCalls
MoveFileWithProgressA

Exports

Exports

ohspes

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

510aee17469834f16b7ff01946464364

Headers

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 36KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 552B

.text
Size: 40KB - Virtual size: 36KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 552B