a27750499dea736b762066278400814f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a27750499dea736b762066278400814f_JaffaCakes118
Size

61KB
MD5

a27750499dea736b762066278400814f
SHA1

e42ea91114736eb7543623089324b9300eb1dbae
SHA256

61721b2fcaa6781c791d3316c7bb1db1199ae463a82637545a87caaca8599c69
SHA512

fe77128470522e187e54b92e191173b53bfcf9825618ad999eeeade6af0b388616f2b116cb30e32a33c1932b139d1fb1257c6b5571c59952455b4852a5e433e8
SSDEEP

1536:G9RqIHYbHC6QEdUvfhV4LzxTwdUVqCbbETOCuQlOkRpCNr:GPqIHYrCedd5cCbbECCuiOkRpC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a27750499dea736b762066278400814f_JaffaCakes118

Files

a27750499dea736b762066278400814f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

202ad641a229352fa71e5e64c04075fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\07_Downloads\Compressed\samp-discord-plugin-1.1.2\samp-discord-plugin-1.1.2\Release\samp-discord-plugin.pdb

Imports

kernel32

CreateFileW
ReadFile
WriteFile
CloseHandle
MultiByteToWideChar
PeekNamedPipe
WaitNamedPipeW
GetCurrentProcessId
IsDebuggerPresent
lstrlenW
GetModuleFileNameW
DisableThreadLibraryCalls
Sleep
GetLastError
GetCommandLineA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
CreateEventW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

msvcp140

_Mtx_destroy_in_situ
_Mtx_current_owns
_Mtx_lock
_Mtx_unlock
_Cnd_init
_Cnd_destroy
_Cnd_init_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_init_in_situ
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
_Xtime_get_ticks
_Thrd_start
_Mtx_destroy
_Mtx_init

ws2_32

WSAStartup
WSACleanup
setsockopt
sendto
inet_addr
socket
htons
recvfrom
closesocket

vcruntime140

__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
__std_terminate
_purecall
memcpy
memset
memmove
_CxxThrowException
__std_type_info_destroy_list
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
terminate
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_errno
_beginthread
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

_strdup
strtok_s

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-crt-math-l1-1-0

log2
ceil

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vfprintf
__acrt_iob_func

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

202ad641a229352fa71e5e64c04075fb

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

msvcp140

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 5KB - Virtual size: 220KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 5KB - Virtual size: 220KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 2KB