b30cc99b23957e48591051fb29805679_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b30cc99b23957e48591051fb29805679_JaffaCakes118
Size

73KB
MD5

b30cc99b23957e48591051fb29805679
SHA1

11aeb214117f382ab65b22da7e42a0f49e0ed198
SHA256

c2379660249aa82c87f402639d864eec8ef376f81ab8f36b9ce112e5133a8f53
SHA512

6175c441eca00467f756089a007a35f1bda5fddd5b76c829ca1813377016a138e586549cd672f67081783ea1ce24590efc0a1a7cfbe42bca5638850decc188f4
SSDEEP

1536:AGzpvIzSwG0FxwPBJAO5AcCiODTpfjI+2oPKMnwUgwrigWZaTrAXJk:AGzazSz00PBR5AJiKfjz2oaUgwWgPA5k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b30cc99b23957e48591051fb29805679_JaffaCakes118

Files

b30cc99b23957e48591051fb29805679_JaffaCakes118
.dll windows:0 windows x86 arch:x86

e594316b481c33765be3e841747d8b4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

srand

kernel32

lstrcatA
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

wsprintfA

wininet

InternetReadFile

Exports

Exports

WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.4pGyn7I
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.93813Oi
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.z44S84a
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.D3lM15L
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.29N9flI
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YGIvR4L
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.7NiKP02
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.7LqVOlA
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Xbp6Oh0
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e594316b481c33765be3e841747d8b4d

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

wininet

Exports

Exports

Sections

.4pGyn7I Size: - Virtual size: 32KB

.93813Oi Size: - Virtual size: 30KB

.z44S84a Size: - Virtual size: 4KB

.D3lM15L Size: - Virtual size: 13KB

.29N9flI Size: - Virtual size: 3KB

.YGIvR4L Size: 1024B - Virtual size: 4KB

.7NiKP02 Size: - Virtual size: 21KB

.7LqVOlA Size: 70KB - Virtual size: 70KB

.Xbp6Oh0 Size: 512B - Virtual size: 148B

.4pGyn7I
Size: - Virtual size: 32KB

.93813Oi
Size: - Virtual size: 30KB

.z44S84a
Size: - Virtual size: 4KB

.D3lM15L
Size: - Virtual size: 13KB

.29N9flI
Size: - Virtual size: 3KB

.YGIvR4L
Size: 1024B - Virtual size: 4KB

.7NiKP02
Size: - Virtual size: 21KB

.7LqVOlA
Size: 70KB - Virtual size: 70KB

.Xbp6Oh0
Size: 512B - Virtual size: 148B