bbb436d2ffdaae59efb587ef3e407b98_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bbb436d2ffdaae59efb587ef3e407b98_JaffaCakes118
Size

85KB
MD5

bbb436d2ffdaae59efb587ef3e407b98
SHA1

69c05c1f7a9aadfaf978482c21b6036fc4c74ccb
SHA256

a84cdf22804dc2dff2fd897d54ba8c6e08decb110248732761ea3f62553dc1bc
SHA512

abf3cf7f554a69d7cc6a8ab11a370588a0070a280d2c8fe37525c096c93bcb1d708281aa75fa616f44fb7976184232fe2daedfb0ab7ac4ba96ce3363ac379731
SSDEEP

1536:S5XxPHGwuckzi7JuudYhT3qWIyIhYrwRwpYWS+5V1D83Yl0YNv:SLPqckzEuudYhT3qWInEwsLLD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbb436d2ffdaae59efb587ef3e407b98_JaffaCakes118

Files

bbb436d2ffdaae59efb587ef3e407b98_JaffaCakes118
.exe windows:5 windows x86 arch:x86

715b0ae91cfef1b5b0956b084738429b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandle
SetLocaleInfoA
GetModuleHandleW
EnumSystemCodePagesW
SetHandleContext
SwitchToFiber
GetTickCount
GetCurrentThreadId
QueryPerformanceCounter
GetCommandLineA
FreeConsole
CreateConsoleScreenBuffer
LoadLibraryA
GetCommConfig
GetComPlusPackageInstallStatus
ReadConsoleOutputCharacterA
GetSystemTimeAsFileTime
GetEnvironmentVariableA
AreFileApisANSI
GetStartupInfoA
GetConsoleCommandHistoryA
InterlockedIncrement
VirtualAlloc
GetCurrentProcessId
IsValidLocale
WriteProfileStringA
LockFile
CompareFileTime

avifil32

EditStreamClone
AVIFileWriteData
AVIStreamReadFormat
AVIFileRelease
AVIGetFromClipboard
IID_IAVIFile
AVIStreamSetFormat
AVIFileEndRecord
AVIStreamTimeToSample
AVIMakeCompressedStream
AVIFileInit
CreateEditableStream
DllGetClassObject

dmdlgs

DllRegisterServer
?GetNumMembers@CDMNodeObj@@QAEKXZ
DllCanUnloadNow
?GetRegionColorStructPtr@CTaskData@@QAEXPAPAU_REGION_COLORS@@AAH@Z
?GetOcxFrameCWndPtr@CTaskData@@QAEPAVCWnd@@XZ
?GetLdmObjectId@CDMNodeObj@@QAE_JXZ
DllGetClassObject
?GetServerName@CDataCache@@QAE?AVCString@@XZ

expsrv

__vbaStrAryToUnicode
BASIC_CLASS_AddRef
__vbaChkstk
_adj_fptan
rtI2FromErrVar
__vbaVarCmpLe
__vbaFpUI1
__vbaFpCmpCy
__vbaVarImp
__vbaVargVarRef
Zombie_GetTypeInfo
__vbaObjSetAddref

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

715b0ae91cfef1b5b0956b084738429b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

avifil32

dmdlgs

expsrv

Sections

.text Size: 33KB - Virtual size: 32KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 18KB - Virtual size: 74KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 344B

.text
Size: 33KB - Virtual size: 32KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 18KB - Virtual size: 74KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 344B