970404509bde7f1e052adb0be289bf77_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

970404509bde7f1e052adb0be289bf77_JaffaCakes118
Size

72KB
MD5

970404509bde7f1e052adb0be289bf77
SHA1

23bb105ec9a95c0998e188a0403344430f1f8396
SHA256

e17a2fa57a2eb9bc2e4f39a6de94320d245b671c317424568e858f70f8b6d6ac
SHA512

c5115f931642a3284bb33ff0fa9dad42e88b8f47aeb8539656e6ec70ea7d7933f68f75e719b7022b19c0d5320f968644ed311c092dd900415725641bbac881bd
SSDEEP

1536:KZQWGx0XDzm00EUPkqM2Vrl8G4P+o/fPlzIF7R4Ec:KiXEDC086arV4P+o/fPlzo14

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
970404509bde7f1e052adb0be289bf77_JaffaCakes118

Files

970404509bde7f1e052adb0be289bf77_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ebaa710b19f97e0661eeb9062310e1c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LCMapStringA
LCMapStringW
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
GetLastError
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
TerminateProcess
GetCurrentProcess
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
GetOEMCP
GetProcAddress
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
SetStdHandle
RtlUnwind
GetCPInfo
GetACP
ReadConsoleInputA
LoadLibraryA
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
SetConsoleMode
GetConsoleMode

Exports

Exports

AMX_ALLOT
AMX_CALLBACK
AMX_DEBUG
AMX_EXEC
AMX_EXECV
AMX_FINDPUBLIC
AMX_FINDPUBVAR
AMX_FLAGS
AMX_GETADDR
AMX_GETPUBLIC
AMX_GETPUBVAR
AMX_GETSTRING
AMX_GETUSERDATA
AMX_INIT
AMX_INITJIT
AMX_NAMELENGTH
AMX_NATIVEINFO
AMX_NUMPUBLICS
AMX_NUMPUBVARS
AMX_RAISEERROR
AMX_REGISTER
AMX_RELEASE
AMX_SETCALLBACK
AMX_SETDEBUGHOOK
AMX_SETSTRING
AMX_SETUSERDATA
AMX_STRLEN
amx_Allot
amx_Callback
amx_Debug
amx_Exec
amx_Execv
amx_FindPubVar
amx_FindPublic
amx_Flags
amx_GetAddr
amx_GetPubVar
amx_GetPublic
amx_GetString
amx_GetUserData
amx_Init
amx_InitJIT
amx_NameLength
amx_NativeInfo
amx_NumPubVars
amx_NumPublics
amx_RaiseError
amx_Register
amx_Release
amx_SetCallback
amx_SetDebugHook
amx_SetString
amx_SetUserData
amx_StrLen

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebaa710b19f97e0661eeb9062310e1c7

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB