8aa33bca29518ec2b7f67897bdd03e72_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8aa33bca29518ec2b7f67897bdd03e72_JaffaCakes118
Size

473KB
MD5

8aa33bca29518ec2b7f67897bdd03e72
SHA1

d18eb8555a4222b7e8d893bdd28b2189d16f6819
SHA256

1a20c1d6bc0973790319a43e4cbe619ad8802bb14b046da8449aecc536dcdae9
SHA512

a7368a14ca28086246d5022e7717c55e6397e8049a676d6e01bb6a4f70ff594e387e0a466af9e71a4df7ffc7fbe069681614dac29813365622efb07c06c652b8
SSDEEP

6144:fDSx26dVX6I0H5ImKjwkwA02DaS2gVouJzngZoS/fNOrGltA/rS72qJX:bSJ0H5IW2dHVw1X9GS7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8aa33bca29518ec2b7f67897bdd03e72_JaffaCakes118

Files

8aa33bca29518ec2b7f67897bdd03e72_JaffaCakes118
.dll windows:5 windows x86 arch:x86

9a91061858771a11673ade87b98580d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
OutputDebugStringA
GetModuleFileNameA
FormatMessageA
LoadLibraryA
GetThreadLocale
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
SetFilePointer
MultiByteToWideChar
ReadFile
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetEndOfFile
GetProcessHeap

user32

MessageBoxA

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right

Sections

.text
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 226KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9a91061858771a11673ade87b98580d0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 308KB - Virtual size: 308KB

.rdata Size: 134KB - Virtual size: 134KB

.data Size: 11KB - Virtual size: 215KB

.rsrc Size: 512B - Virtual size: 176B

.reloc Size: 17KB - Virtual size: 17KB

.text Size: 226KB - Virtual size: 228KB

.text
Size: 308KB - Virtual size: 308KB

.rdata
Size: 134KB - Virtual size: 134KB

.data
Size: 11KB - Virtual size: 215KB

.rsrc
Size: 512B - Virtual size: 176B

.reloc
Size: 17KB - Virtual size: 17KB

.text
Size: 226KB - Virtual size: 228KB