8ba131f308fcbaaa7c5aed3900b639fd_JaffaCakes118

General

Target

8ba131f308fcbaaa7c5aed3900b639fd_JaffaCakes118
Size

17KB
MD5

8ba131f308fcbaaa7c5aed3900b639fd
SHA1

45cfce7b8c5fce7434a12c3599c0321b8962cf52
SHA256

d323b18c1d7413231079ec9ac04ee853f99b26cff15cb1b02da8b94e5a649d99
SHA512

164ccceb1a5d8ae419fc77afe704a390ed3781f2c8d73909ec959bce71dc8d62ccd4736e9fa13119ddf53eeb48b621a4956d58793a5b05e40d971e26bf9783d8
SSDEEP

192:fn3/jUIFAN7C9Y+GfQzX7Dr/zX7SuS6OdEai26Ox+Ugb2qaSsnZ/jZAsIQF/otUD:jN6N7CMQlb2bFlZJ/oer62hk8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ba131f308fcbaaa7c5aed3900b639fd_JaffaCakes118

Files

8ba131f308fcbaaa7c5aed3900b639fd_JaffaCakes118
.dll windows:5 windows x86 arch:x86

2cc2d5fb6a7c03cec276950c9968cd9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Malte\Desktop\CaBase\CaBase\Release\CaBase.pdb

Imports

kernel32

Sleep
DisableThreadLibraryCalls
GetModuleHandleA
CreateThread
VirtualQuery
GetCurrentProcess
FlushInstructionCache
VirtualProtect
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetTickCount
GetCurrentThreadId
QueryPerformanceCounter

user32

GetAsyncKeyState

msvcr90

_decode_pointer
_encoded_null
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
free
_malloc_crt
_encode_pointer
vsprintf_s
??2@YAPAXI@Z
rand
malloc
memset
_initterm
memcpy

d3dx9_42

D3DXCreateFontA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2cc2d5fb6a7c03cec276950c9968cd9e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcr90

d3dx9_42

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 1024B - Virtual size: 790B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 1024B - Virtual size: 790B