a5de703814e71ed3df24c448a342d2d8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a5de703814e71ed3df24c448a342d2d8_JaffaCakes118
Size

1.0MB
MD5

a5de703814e71ed3df24c448a342d2d8
SHA1

58004a3a540c9dddf550f0600a1c74bf905074b6
SHA256

8e0964dd5d09ac773875fd4911a256e039f6c322fdb883f193dab7d9ef1ce9d6
SHA512

6e1650afde7c0977736c70d17cc73c73d390cc5e4e31d2d18c715d677f5e209d7ff72f65a83233231769a73735250f6d7c41b2fa53aef4c16ef3e54c12fde784
SSDEEP

24576:ryK1QTmUJ/lhK4x/gswCMe1dAgERK7fr0qQWOtkrWGdoJvJ:PaRlWmERmorkrPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5de703814e71ed3df24c448a342d2d8_JaffaCakes118

Files

a5de703814e71ed3df24c448a342d2d8_JaffaCakes118
.dll windows:1 windows x86 arch:x86

58305fb0ebe8d43e6c5ce81298c02c6c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt20

_initterm
getenv
exit
_sys_nerr
_sys_errlist
realloc
system
_umask
rename
_errno
strlen
strcpy
strcat
localtime
time
__p__timezone
longjmp
_setjmp3
strncmp
strncpy
strchr
_adjust_fdiv
malloc
free
_mkdir
_access
_tzset
_chmod
_unlink
_stat
_getpid
_getcwd
_chdir
_rmdir
_write

kernel32

CreateMutexA
LeaveCriticalSection
CreateEventA
FlushFileBuffers
WriteFile
SetFilePointer
ReadFile
GlobalFree
GlobalAlloc
GetVersion
Sleep
DeleteCriticalSection
ResetEvent
GetProcAddress
LoadLibraryA
ExitThread
SetThreadPriority
TlsGetValue
CreateThread
ResumeThread
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetDiskFreeSpaceA
UnlockFile
CreateFileA
GetFileSize
LockFile
GetLastError
FindClose
FindNextFileA
EnterCriticalSection
WaitForSingleObject
FreeLibrary
CloseHandle
InitializeCriticalSection
GetTickCount
FindFirstFileA
SetEvent
ReleaseMutex
GetFileAttributesA

user32

OemToCharA

Exports

Exports

MutexDestroy
MutexInit
MutexLock
MutexUnlock
PrfCreate
PrfDestroy
PrfExecEval
PrfExecLoad
PrfExecReset
PrfQryExport
PrfQryExportFree
PrfQryFree
PrfQryNew
VdkAdminAssist
VdkAdminBackup
VdkAdminOptimize
VdkAdminPurge
VdkAssistBrowse
VdkAssistBrowseFree
VdkAssistExpand
VdkAssistExpandFree
VdkAssistFind
VdkAssistFindFree
VdkAssistFree
VdkAssistGetInfo
VdkAssistGetInfoFree
VdkAssistNew
VdkAssistSetInfo
VdkCollectionClose
VdkCollectionFromPath
VdkCollectionGetInfo
VdkCollectionGetInfoFree
VdkCollectionOpen
VdkCollectionSetInfo
VdkCollectionSubmit
VdkDocDelete
VdkDocMap
VdkDocMapFree
VdkDocRead
VdkDocReadBatch
VdkDocReadBatchFree
VdkDocReadFree
VdkDocStreamFree
VdkDocStreamNew
VdkDocStreamRead
VdkDocStreamReadFree
VdkDocWrite
VdkFiltersDirectory
VdkHighlightMS
VdkHighlightRead
VdkHighlightReadFree
VdkKBClose
VdkKBDelete
VdkKBExportOtl
VdkKBFromPath
VdkKBGetInfo
VdkKBGetInfoFree
VdkKBImportOtl
VdkKBOpen
VdkKBSaveQuery
VdkKBSetInfo
VdkLockDefault
VdkLockNoop
VdkQParserFree
VdkQParserNew
VdkQueryMap
VdkQueryMapFree
VdkSearchDocIdToNth
VdkSearchFree
VdkSearchGetInfo
VdkSearchGetInfoFree
VdkSearchMerge
VdkSearchNew
VdkSearchNthToDocId
VdkSearchSetInfo
VdkService
VdkSessionDefineGateway
VdkSessionFree
VdkSessionGetInfo
VdkSessionGetInfoFree
VdkSessionNew
VdkSessionSetInfo
VdkSessionSpawn
VdkTFieldBoundNew
VdkTFieldFree
VdkTFieldIterate
VdkTFieldNew
VdkTFieldWriteRange
VdkVgwDocRead

Sections

.text
Size: 731KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 260B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58305fb0ebe8d43e6c5ce81298c02c6c

Headers

File Characteristics

Imports

msvcrt20

kernel32

user32

Exports

Exports

Sections

.text Size: 731KB - Virtual size: 730KB

.bss Size: - Virtual size: 260B

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 19KB - Virtual size: 19KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 174KB - Virtual size: 174KB

.reloc Size: 18KB - Virtual size: 17KB

.text
Size: 731KB - Virtual size: 730KB

.bss
Size: - Virtual size: 260B

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 19KB - Virtual size: 19KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 174KB - Virtual size: 174KB

.reloc
Size: 18KB - Virtual size: 17KB