8eb06de5b5c95711c1021dc9036c2eae_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8eb06de5b5c95711c1021dc9036c2eae_JaffaCakes118
Size

131KB
MD5

8eb06de5b5c95711c1021dc9036c2eae
SHA1

41b96ba7b5e6c1450ef341dc1fea3b031de5e199
SHA256

287be82a0afb082e70275f2e235e3fc72d1c69b09e8e5c6adbd99086e0cd6bf5
SHA512

acaeff8060e689d7d48b24a102d3237d08f51f8253e451cf241adee1f2eb0ee68d2f0bc7d5cdadfdf8d5ac3136be6c499b27c51206685ee19a87e42abde61ce8
SSDEEP

3072:nVyUemvZchNTUGB6oWRzKTBUKa1OLLwIjZbKnfh:nvjvZKplBA1QLwI9mf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eb06de5b5c95711c1021dc9036c2eae_JaffaCakes118

Files

8eb06de5b5c95711c1021dc9036c2eae_JaffaCakes118
.dll windows:6 windows x86 arch:x86

97784d38e2ae6f8892fea6a4186c9080

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
WideCharToMultiByte
ReadFile
GetSystemDirectoryA
MultiByteToWideChar
lstrlenW
Process32FirstW
SetFileTime
CreateToolhelp32Snapshot
GetFileTime
GetCurrentThreadId
GetDiskFreeSpaceExA
CloseHandle
CreateThread
GetCPInfo
GetFileSize
Process32NextW
CreateFileA
GetLastError
HeapFree
DecodePointer
GetCommandLineA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
EncodePointer
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameW
LCMapStringW
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
HeapSize
HeapReAlloc
LoadLibraryW

advapi32

RegEnumValueW
RegCreateKeyA
RegCloseKey

Exports

Exports

candy_starter
ks_free
ks_int_enter
ks_item_remove
ks_list_initialize
ks_mutex_delete
ks_mutex_sendmsg
ks_queue_accept
ks_queue_create
ks_queue_delete
ks_queue_sendmsg
ks_queue_waitfor
ks_schedule_unlock
ks_sem_sendmsg
ks_start
ks_thread_delay
ks_thread_init
ks_thread_main
ks_thread_suspend
ks_threadtable_init

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97784d38e2ae6f8892fea6a4186c9080

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 106KB - Virtual size: 106KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 8KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 106KB - Virtual size: 106KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 8KB

.reloc
Size: 6KB - Virtual size: 5KB