8672b63b522ecf337ff7f115e09d35bd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8672b63b522ecf337ff7f115e09d35bd_JaffaCakes118
Size

97KB
MD5

8672b63b522ecf337ff7f115e09d35bd
SHA1

6efda74abb9aa5a9257912b13aaa41ff2de16ba7
SHA256

f4b3e1be87de83f8978b748fc4256f3bfdd814adf97140cf1b7c3d0bbb85563d
SHA512

ba9ee18acf9cd1f3c3d3dd5ca0685690364a9b17976f22d41e59acd3785348fdf94c0e0f82326cb67ae7348d40796e28f4f51bc9b5c8128e15b82b1eba76c587
SSDEEP

1536:gxX+fxoCwN02wWcH/YV89ojZtV7AKEdqJAE6B8VIaZ6L7LeYcKGcLnF8wc:gxOfmzTwYV86j6xdqqE6B8VA3qsJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8672b63b522ecf337ff7f115e09d35bd_JaffaCakes118

Files

8672b63b522ecf337ff7f115e09d35bd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8c982fca625c5b61e6d48d4396e823f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalReAlloc
GetCurrentThreadId
GetSystemDirectoryA
CreateDirectoryA
GetSystemInfo
CreateProcessA
GetCurrentThread
GetFileType
GetTimeFormatW
GetProcAddress
SetFilePointer
GetModuleHandleW
CompareStringW
CloseHandle
LoadLibraryW
IsBadWritePtr
QueryPerformanceCounter
ExitProcess
lstrcatA
GetExitCodeProcess
GlobalAlloc
LoadLibraryA
FindNextFileW
GetWindowsDirectoryW
CreateDirectoryW
WriteConsoleW
HeapFree
GetModuleHandleA
TerminateThread
GetLastError
SetUnhandledExceptionFilter

tapi32

lineOpenW
lineDevSpecificFeature
lineSetupConference
lineAddToConference

msvcrt

wcsncmp
_acmdln
wcsncpy
isgraph
isdigit
atoi
strcpy
__p__commode
__wgetmainargs
strncpy
_wcsnicmp
_wtoi
_vsnprintf
memset
towupper
memcpy
_iob

user32

SetCapture
GetKeyState
InvalidateRect
ReleaseDC
GetDlgItem
GetWindowPlacement
SystemParametersInfoW
GetMenuItemCount
DispatchMessageA
LoadCursorW
MsgWaitForMultipleObjects
GetAsyncKeyState
DeleteMenu
RegisterMessagePumpHook
LoadMenuA
LoadAcceleratorsW
SetScrollPos
DialogBoxParamW
RemoveMenu
LoadStringW
RealChildWindowFromPoint
PostQuitMessage
OpenClipboard
ShowWindow

gdi32

SetTextColor
SelectPalette
CreatePen
SetMapMode
PatBlt
CreateSolidBrush
CreateFontIndirectA
SetPixel
BitBlt
SetBkColor
DeleteDC
GetDeviceCaps
SelectObject
SaveDC
CreateCompatibleDC

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

barg
Size: 512B - Virtual size: 277B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c982fca625c5b61e6d48d4396e823f4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

tapi32

msvcrt

user32

gdi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

barg Size: 512B - Virtual size: 277B

.data Size: 7KB - Virtual size: 6KB

.rsrc Size: 107KB - Virtual size: 106KB

.reloc Size: 512B - Virtual size: 64B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

barg
Size: 512B - Virtual size: 277B

.data
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 107KB - Virtual size: 106KB

.reloc
Size: 512B - Virtual size: 64B