8d6ac77235a1469919598b95440e2241_JaffaCakes118

General

Target

8d6ac77235a1469919598b95440e2241_JaffaCakes118
Size

208KB
MD5

8d6ac77235a1469919598b95440e2241
SHA1

a593772ad4ebd8ff0b61ae41258acd20267fe878
SHA256

30e2e1a7b0455c303b42a370e67f7c311ea2eb13e1789fd6c00f2d917fc8336c
SHA512

e074523cd74460f69405143b7031174e6ac27446ffc8dddf9377e0d3a0f6e8f190c50ae56c82b9647fd71e9cebeaccbcf36f405e43660d35afc95fe5d2062276
SSDEEP

6144:N1EAUaXCNBWgkXtu8dLa5wDERDkLRg1kXvlcR/dn5:NPUaXCNBWg+ttLfDERAiicR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d6ac77235a1469919598b95440e2241_JaffaCakes118

Files

8d6ac77235a1469919598b95440e2241_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d6de9ae68edb6f6d4ecf4359b5e8a8dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
lstrcpyA
GetModuleFileNameA
GetProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
lstrlenA
IsDBCSLeadByte
lstrcmpA
lstrcmpiA
GetProfileIntA

user32

GetDlgItem
GetWindowLongA
EndDialog
SetFocus
SetDlgItemTextA
GetDlgItemTextA
DialogBoxParamA
LoadCursorA
SetCursor
MessageBoxA
LoadStringA
CharLowerA
CharNextA
wsprintfA
OemToCharA
SetWindowLongA

msvcrt

memmove
memcpy
_adjust_fdiv
_initterm
free
__CxxFrameHandler
strtok
??3@YAXPAX@Z
malloc
wcstombs
_strdup
??2@YAPAXI@Z
_fullpath
isprint
_makepath
_splitpath
mbstowcs
strchr
atoi
sprintf
atof

Exports

Exports

UXDDecodeDestinationOptions
UXDEncodeDestinationOptions
UXDExportToDestination
UXDFreeDestinationOptions
UXDGetErrorText
UXDGetExportDestinations
UXDGetVersion
UXDInitExportDestination
UXDInitialize
UXDTermExportDestination
UXDTerminate
_DllMain@12

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6de9ae68edb6f6d4ecf4359b5e8a8dc

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 172KB - Virtual size: 169KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 924B

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 172KB - Virtual size: 169KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 924B