86fa97d0e7e9e48440e7e9a1102c4efb_JaffaCakes118

General

Target

86fa97d0e7e9e48440e7e9a1102c4efb_JaffaCakes118
Size

45KB
MD5

86fa97d0e7e9e48440e7e9a1102c4efb
SHA1

f7346fb71d85c27ca04051cd7111c295389caf82
SHA256

47346a4ed3f2a068652fabea24c653ff9638ff5380abd06f39933a9cb4007355
SHA512

5333d8a7bdad12da83dd14057bc5401e7d5d1d565d66e7278efae40692ce94aa2ab576679eaf76c19fa2a6431de01c6e918e0dc11c52cda7d3c5a9561d545c66
SSDEEP

768:Y9lfzVYus27Yl3lijxlUv2g1cZ9r7SwvLR3FpRIm:Y3JYjSY5ojxbg0F/pRT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86fa97d0e7e9e48440e7e9a1102c4efb_JaffaCakes118

Files

86fa97d0e7e9e48440e7e9a1102c4efb_JaffaCakes118
.dll windows:1 windows x86 arch:x86

960239f043416dfd3194ce96b9ffc2bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperA
MessageBoxA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ResumeThread
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile

libmex

mexErrMsgTxt
mexWarnMsgTxt

libmx

mxCalloc
mxCreateDoubleMatrix_700
mxGetClassID
mxGetM
mxGetN
mxGetPr
mxIsComplex
mxIsNumeric

Exports

Exports

mexFunction

Sections

AUTO
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

960239f043416dfd3194ce96b9ffc2bf

Headers

File Characteristics

Imports

user32

kernel32

libmex

libmx

Exports

Exports

Sections

AUTO Size: 37KB - Virtual size: 36KB

.idata Size: 2KB - Virtual size: 1KB

DGROUP Size: 3KB - Virtual size: 9KB

.edata Size: 512B - Virtual size:

.reloc Size: 2KB - Virtual size:

AUTO
Size: 37KB - Virtual size: 36KB

.idata
Size: 2KB - Virtual size: 1KB

DGROUP
Size: 3KB - Virtual size: 9KB

.edata
Size: 512B - Virtual size:

.reloc
Size: 2KB - Virtual size: