a3db74577b26696f1b91753991636794_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a3db74577b26696f1b91753991636794_JaffaCakes118
Size

62KB
MD5

a3db74577b26696f1b91753991636794
SHA1

d4f4fd850f4313bbbc2270501c7177a5bd80dd97
SHA256

8d33cec1d8f2ac031b254d375004e10ef10d4032b8ef4480893f2116d77fa9d8
SHA512

a11b937070265f7a9b59e7518b2ae17bd8101dff779b8ea8e8263483720205bc3c72e305ba0255a9c7e7412120795eae9ba8103bb04158a1e5c10ff20f220026
SSDEEP

1536:fCbUbS53mgCUSucCK5FWnew1DxCOrw7xi8/nP4Pa8jXLmoc:vW59CRuyQeQtFrCxVQC8jbnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3db74577b26696f1b91753991636794_JaffaCakes118

Files

a3db74577b26696f1b91753991636794_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ba591e1db44f702c28ae7eb3ea5ede7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
GetProcAddress
lstrlenA
_lwrite
_hwrite
GlobalAlloc
GlobalFree
DisableThreadLibraryCalls
WideCharToMultiByte
Sleep
InterlockedExchange
LocalFree
LocalAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTickCount
GetCommandLineA
InterlockedCompareExchange
VirtualProtect

user32

wsprintfA
MessageBoxA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

msvcrt

_adjust_fdiv
malloc
_initterm
wcslen
free
_except_handler3
__CxxFrameHandler
??3@YAXPAX@Z

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba591e1db44f702c28ae7eb3ea5ede7c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

msvcp60

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 34KB - Virtual size: 67KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 1000B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 34KB - Virtual size: 67KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 1000B