bbbb34849b4b4c1d4d9fda2de3e5eb71_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bbbb34849b4b4c1d4d9fda2de3e5eb71_JaffaCakes118
Size

62KB
MD5

bbbb34849b4b4c1d4d9fda2de3e5eb71
SHA1

8f56f0415a0fe93126da43049da7a52c95147a6f
SHA256

24c4c5335cf53945fc0822f3a84fddd909f8aac9db00d65818dc3bf42cbd6541
SHA512

5e6d3ff1c6530b2d6a3854e359a8c55748308606dfa170b4013dbaf56b7be6668f20d4951664545e826718a8937e15e46bb1fbb74f6b1af08f714528a095c9bb
SSDEEP

1536:fCbZbS53mgCUSucoK5FWnew1DxCOrw7xi8/nP4Pa8jXLmoc:CW59CRuMQeQtFrCxVQC8jbnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbbb34849b4b4c1d4d9fda2de3e5eb71_JaffaCakes118

Files

bbbb34849b4b4c1d4d9fda2de3e5eb71_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ba591e1db44f702c28ae7eb3ea5ede7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
GetProcAddress
lstrlenA
_lwrite
_hwrite
GlobalAlloc
GlobalFree
DisableThreadLibraryCalls
WideCharToMultiByte
Sleep
InterlockedExchange
LocalFree
LocalAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTickCount
GetCommandLineA
InterlockedCompareExchange
VirtualProtect

user32

wsprintfA
MessageBoxA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

msvcrt

_adjust_fdiv
malloc
_initterm
wcslen
free
_except_handler3
__CxxFrameHandler
??3@YAXPAX@Z

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba591e1db44f702c28ae7eb3ea5ede7c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

msvcp60

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 34KB - Virtual size: 67KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 1000B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 34KB - Virtual size: 67KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 1000B