bc52596c22c44aee0b3bf7ecf23dd100_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bc52596c22c44aee0b3bf7ecf23dd100_JaffaCakes118
Size

4.1MB
MD5

bc52596c22c44aee0b3bf7ecf23dd100
SHA1

4c23a251fe681708a305292db9fb994b0178d0f9
SHA256

900dc683a82ef292ece206c72d7d2ef207ca430f21ed03e2453a558a79bac1db
SHA512

c917a35e497bcfae69b25b87711791bade6513cf4d2ff9831e54f2535b7b10c15aba89b11ed1c35dbcfb26bdc1453649553fc96bdb3b6572c3b4bd38d2017e97
SSDEEP

49152:jjDa96z3rkh7BV7nWbUYLvieb7tTzEdvVnRKpN5keV/xVmr0jLpfDMKmEr/EAjDE:jjB3qt9WQYziebkvyV/3/oKmEnjEZF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc52596c22c44aee0b3bf7ecf23dd100_JaffaCakes118

Files

bc52596c22c44aee0b3bf7ecf23dd100_JaffaCakes118
.dll windows:4 windows x64 arch:x64

625c88ee902f54c74b185c0b2ff0165d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateSemaphoreA
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReleaseSemaphore
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_close
_lseek
_open
_read
_strnicmp
_write
__dllonexit
__iob_func
_amsg_exit
_beginthreadex
_errno
_initterm
_lock
_onexit
_snprintf
_unlock
_vsnprintf
_vsnwprintf
abort
acos
asin
atan
calloc
ceil
cos
cosh
exp
floor
fprintf
fputs
free
frexp
fwrite
isspace
ldexp
log
log10
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
realloc
signal
sin
sinh
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strtod
strtok
strtol
tan
tanh
toupper
vfprintf

Exports

Exports

FF264UpdateRefFrameSliceLong
FFGetMBNumber
FFH264BuildPicParams
FFH264CheckCompatibility
FFH264DecodeBuffer
FFH264IsRefFrameInUse
FFH264SetCurrentPicture
FFH264SetDxvaSliceLong
FFH264UpdateRefFramesList
FFIsInterlaced
FFIsSkipped
FFVC1UpdatePictureParam
GetCPUCount
GetFFMpegPictureType
av_free
av_h264_decode_frame
av_init_packet
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_mallocz
av_parser_close
av_parser_init
av_parser_parse2
av_vc1_decode_frame
avcodec_alloc_context
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio3
avcodec_decode_video2
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_search_recovery_point
avcodec_init
avcodec_open
avcodec_register_all
avcodec_thread_free
avcodec_thread_init
dsputil_init
getVersion
gradfunFilter
gradfunInit
palette8tobgr15
palette8tobgr16
palette8tobgr24
palette8tobgr32
palette8torgb15
palette8torgb16
palette8torgb24
palette8torgb32
pp_free_context
pp_get_context
pp_postprocess
sws_convertPalette8ToPacked24
sws_convertPalette8ToPacked32
sws_freeContext
sws_freeFilter
sws_freeVec
sws_getConstVec
sws_getContext
sws_getDefaultFilter
sws_getGaussianVec
sws_normalizeVec
sws_scale
yadif_filter
yadif_init
yadif_uninit

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 696KB - Virtual size: 695KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/35
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/47
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/86
Size: 512B - Virtual size: 284B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/108
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

625c88ee902f54c74b185c0b2ff0165d

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.data Size: 50KB - Virtual size: 49KB

.rdata Size: 696KB - Virtual size: 695KB

.rodata Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 4.3MB

.edata Size: 2KB - Virtual size: 2KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 72B

.reloc Size: 5KB - Virtual size: 4KB

/4 Size: 1KB - Virtual size: 1KB

/19 Size: 2KB - Virtual size: 2KB

/35 Size: 40KB - Virtual size: 40KB

/47 Size: 6KB - Virtual size: 6KB

/61 Size: 7KB - Virtual size: 6KB

/73 Size: 3KB - Virtual size: 2KB

/86 Size: 512B - Virtual size: 284B

/97 Size: 17KB - Virtual size: 16KB

/108 Size: 1KB - Virtual size: 1KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 50KB - Virtual size: 49KB

.rdata
Size: 696KB - Virtual size: 695KB

.rodata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 4.3MB

.edata
Size: 2KB - Virtual size: 2KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 72B

.reloc
Size: 5KB - Virtual size: 4KB

/4
Size: 1KB - Virtual size: 1KB

/19
Size: 2KB - Virtual size: 2KB

/35
Size: 40KB - Virtual size: 40KB

/47
Size: 6KB - Virtual size: 6KB

/61
Size: 7KB - Virtual size: 6KB

/73
Size: 3KB - Virtual size: 2KB

/86
Size: 512B - Virtual size: 284B

/97
Size: 17KB - Virtual size: 16KB

/108
Size: 1KB - Virtual size: 1KB