b3be1f3730a5c7b961012fe6d12b74cd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b3be1f3730a5c7b961012fe6d12b74cd_JaffaCakes118
Size

12KB
MD5

b3be1f3730a5c7b961012fe6d12b74cd
SHA1

0a516906627f1a18d30382e9c52d957a98b47b75
SHA256

fb2debab50ca416cf537a82373866f5c1484cbde007cf33879afe8f18f7f8b06
SHA512

c5cd7660b767374b73b334be2b2eb497d355c75102a897764a350ab89285fe8a0a155bef9e21aa5ae3a778e33c925eccdf774cd368db9fb571bbc40fe2eb281d
SSDEEP

192:B51DsRSAnG0ofmTihRusAZydv3X+cqZIJ9G:uAAGteTihRIgdPuE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3be1f3730a5c7b961012fe6d12b74cd_JaffaCakes118

Files

b3be1f3730a5c7b961012fe6d12b74cd_JaffaCakes118
.dll windows:5 windows x86 arch:x86

9b8769911c13541143ea9421dc1513b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Adrian\Documents\Visual Studio 2008\Projects\Shaiya\Release\Shaiya.pdb

Imports

kernel32

GlobalAlloc
GlobalLock
GlobalUnlock
CreateThread
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
Sleep

user32

GetAsyncKeyState
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
PostMessageA
SetWindowTextA
GetWindowTextA
DispatchMessageA
TranslateMessage
GetMessageA
SendMessageA
GetWindowLongA
SetWindowLongA
CreateDialogParamA
EnableWindow
ShowWindow
GetDlgItem

gdi32

CreateFontA

msvcr90

_lock
__dllonexit
_unlock
__clean_type_info_names_internal
memcpy
_onexit
_except_handler4_common
??2@YAPAXI@Z
??3@YAXPAX@Z
strcpy_s
sprintf_s
strcat_s
toupper
strtol
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
memset

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b8769911c13541143ea9421dc1513b7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msvcr90

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 944B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 678B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 944B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 678B