8d7dee83252ef34a7fd055c4c356fc72_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8d7dee83252ef34a7fd055c4c356fc72_JaffaCakes118
Size

276KB
MD5

8d7dee83252ef34a7fd055c4c356fc72
SHA1

77e04c4d6aa990259cc4e81007571d5f4e3ce371
SHA256

b8b6dbcf4de7ef2bc0e6320fd2f8f05d34f7489965ef9ba30cbdf74b64c1c565
SHA512

2c46484a8b41d0a077877ec5f2b787dd679ee1bad09bfe734a9a340e7ea0b7e933ff08a571a4e60f5dd483288ae9d4b478a7d130085f8db6e9551bb2ebe5b915
SSDEEP

6144:MKsOXlKM/5MeHQjiyzmRiIVLIFrqZdcd+lcDvUvOctQV4Uz5R0Aa79J:n0M/5MeHQeL5gcPSEA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d7dee83252ef34a7fd055c4c356fc72_JaffaCakes118

Files

8d7dee83252ef34a7fd055c4c356fc72_JaffaCakes118
.dll windows:4 windows x86 arch:x86

15c2f31a98dd9682ed701878e2556257

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetProcAddress
LoadLibraryA
MultiByteToWideChar
lstrlenA
GetProcessHeap
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
LocalFree

msvcrt

wcscpy
strncat
wcstombs
_access
memmove
rand
srand
_errno
calloc
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__dllonexit
_onexit
strncmp
_snprintf
atoi
strncpy
strrchr
_except_handler3
free
malloc
strchr
_CxxThrowException
strstr
_ftol
_beginthreadex
ceil
putchar
puts
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
_strupr
_strnicmp
_stricmp
_strcmpi

msvcp60

?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Xran@std@@YAXXZ

Exports

Exports

ServiceMain

Sections

.text
Size: 220KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15c2f31a98dd9682ed701878e2556257

Headers

File Characteristics

Imports

kernel32

msvcrt

msvcp60

Exports

Exports

Sections

.text Size: 220KB - Virtual size: 218KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 16KB - Virtual size: 18KB

.idata Size: 4KB - Virtual size: 2KB

.didat Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 288B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 220KB - Virtual size: 218KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 16KB - Virtual size: 18KB

.idata
Size: 4KB - Virtual size: 2KB

.didat
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 288B

.reloc
Size: 12KB - Virtual size: 8KB