a39521a8ea20b99f963fa511cfbab6d1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a39521a8ea20b99f963fa511cfbab6d1_JaffaCakes118
Size

67KB
MD5

a39521a8ea20b99f963fa511cfbab6d1
SHA1

bc66ee804d1963405ecb458797107439be454049
SHA256

9e7b6d8b41f75333a6107bca1450554e13d500a384fa15fdb94c06295d5a16ca
SHA512

7889a64cd1f3e9d30c16f568cb7f46541d2ba56c68c5d4e6e64699c6c5b734e2a925b8dc2ed74ff5edc0bb8d3321808b0e87e16a537bff16c9180a4d643fa959
SSDEEP

1536:CFzztfC/I7NkeEc3ZRPGFEYZQYm8Sli2E3qPTB2gZbHI0XVrG5iuGw:CFAIuuvemYZQHUJSB2gtHI0XVrGl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a39521a8ea20b99f963fa511cfbab6d1_JaffaCakes118

Files

a39521a8ea20b99f963fa511cfbab6d1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e594316b481c33765be3e841747d8b4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

srand

kernel32

lstrcatA
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

wsprintfA

wininet

InternetReadFile

Exports

Exports

WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.2PBv8Nk
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.09cqSCe
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pFHvfF5
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.477h70U
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.onsUotQ
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lg76Alz
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.6dU3Yt8
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.6b83XAS
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KRC7WwO
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e594316b481c33765be3e841747d8b4d

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

wininet

Exports

Exports

Sections

.2PBv8Nk Size: - Virtual size: 31KB

.09cqSCe Size: - Virtual size: 28KB

.pFHvfF5 Size: - Virtual size: 3KB

.477h70U Size: - Virtual size: 5KB

.onsUotQ Size: - Virtual size: 3KB

.lg76Alz Size: 1024B - Virtual size: 4KB

.6dU3Yt8 Size: - Virtual size: 22KB

.6b83XAS Size: 63KB - Virtual size: 63KB

.KRC7WwO Size: 512B - Virtual size: 88B

.2PBv8Nk
Size: - Virtual size: 31KB

.09cqSCe
Size: - Virtual size: 28KB

.pFHvfF5
Size: - Virtual size: 3KB

.477h70U
Size: - Virtual size: 5KB

.onsUotQ
Size: - Virtual size: 3KB

.lg76Alz
Size: 1024B - Virtual size: 4KB

.6dU3Yt8
Size: - Virtual size: 22KB

.6b83XAS
Size: 63KB - Virtual size: 63KB

.KRC7WwO
Size: 512B - Virtual size: 88B