bb613b6f6540d4bfaf7fd19ce1cff7c3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bb613b6f6540d4bfaf7fd19ce1cff7c3_JaffaCakes118
Size

104KB
MD5

bb613b6f6540d4bfaf7fd19ce1cff7c3
SHA1

20c5a54d3f9937876c084711c8e8cfc6e73fef14
SHA256

b8a6c10ba5fcf21e5e8bc2b86de3d56683d6661424a930bf02408729b38e1f23
SHA512

f1f5b053da5ca97c436b1ed3d922ec952ac3d104ff642a64d06fca6cdafb84ca89321c3a9bb4f5e54166c1cde1fd7e3221df49e5af60a86cea95667b6bb36406
SSDEEP

1536:OdH14RgSTGScVpbdnCI0hivMathP1bwf3AJKeLtfhuKRmhKM6erHkH4D0EOrloZN:QCzhWMa1wf3XeLt5uKRDMzrE8IR0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb613b6f6540d4bfaf7fd19ce1cff7c3_JaffaCakes118

Files

bb613b6f6540d4bfaf7fd19ce1cff7c3_JaffaCakes118
.dll windows:5 windows x86 arch:x86

204923ad3a6e0c8dfa595af42a7ad0ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Johannes\Documents\Visual Studio 2010\Projects\Catalyst\Release\blablaxD.pdb

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
DecodePointer
InterlockedExchange
VirtualProtect
FlushInstructionCache
GetCurrentProcess
CreateThread
DisableThreadLibraryCalls
Sleep
IsBadReadPtr
GetModuleHandleA
GetCurrentProcessId
GetModuleHandleW
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
EncodePointer
TerminateProcess
UnhandledExceptionFilter
InterlockedCompareExchange

user32

GetAsyncKeyState
GetSystemMetrics
keybd_event
MessageBoxA

d3dx9_43

D3DXCreateSprite
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateFontA

msvcr100

malloc
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
free
vsprintf_s
__CxxFrameHandler3
memset
_CIatan

winmm

sndPlaySoundA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

204923ad3a6e0c8dfa595af42a7ad0ff

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

d3dx9_43

msvcr100

winmm

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 59KB - Virtual size: 77KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 59KB - Virtual size: 77KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 2KB - Virtual size: 2KB