8da24790bb8d07d6eecb76e17739e342_JaffaCakes118

General

Target

8da24790bb8d07d6eecb76e17739e342_JaffaCakes118
Size

69KB
MD5

8da24790bb8d07d6eecb76e17739e342
SHA1

53dbe223c6cf8e6046cdaf5ada44db9d455ec6fe
SHA256

71a36683fcbaa809667c49e6af62c012fbbca968967ed7dc15b3fa66b845bfc2
SHA512

0164dd9453d10d21584d28bb1d58cae5a2786171ce9e01f5741733ffe57dcf3a1e8989288e9e9a08999beb1e6bb4655993dfc5cf178ad8f2b67cb21f1d2b6292
SSDEEP

1536:SbkhMXENO7/GM72SjVmz8W7CtOywkxQBwo149mf:S4iXEE7+MpYNGVJ2z496

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8da24790bb8d07d6eecb76e17739e342_JaffaCakes118

Files

8da24790bb8d07d6eecb76e17739e342_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4de9ae33da1c5014c306f6f2a1ed3496

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedExchange
Sleep
InterlockedCompareExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CloseHandle
CreateFileW
TerminateProcess
LocalAlloc
LocalFree
RtlMoveMemory
SetLastError
LocalReAlloc
MulDiv
WideCharToMultiByte
GlobalFree
VirtualProtect
GetCommandLineA
GlobalAlloc

gdi32

GetRegionData
ExtCreateRegion
IntersectClipRect
GetClipRgn
FillPath
StrokeAndFillPath
StrokePath
SelectClipRgn
CreateRectRgn
ExtSelectClipRgn
SelectClipPath
CreatePen
GetNearestColor
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
PlayEnhMetaFile
GetWinMetaFileBits
DeleteEnhMetaFile
CloseEnhMetaFile
ExtTextOutA
GetRgnBox
CombineRgn
DeleteObject
CreateDIBSection
GetDIBits
GetObjectA
GetStockObject
CreateFontIndirectA
GetRandomRgn

msvcr71

_except_handler3
memset
_adjust_fdiv
free
atoi
memcpy
_initterm
malloc
__CppXcptFilter
__dllonexit
_onexit

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4de9ae33da1c5014c306f6f2a1ed3496

Headers

File Characteristics

Imports

kernel32

gdi32

msvcr71

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 4KB - Virtual size: 35KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 4KB - Virtual size: 35KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 1KB - Virtual size: 1KB