bf140f560155d7eb7fa5db4f120badb1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bf140f560155d7eb7fa5db4f120badb1_JaffaCakes118
Size

79KB
MD5

bf140f560155d7eb7fa5db4f120badb1
SHA1

29b4d8f023a130c3b12c0c6c1ba90557e29f3992
SHA256

4d66d68ab2a42822ed86dd89660694c38c9e6c1f3ff1e5adb88c2c064d8d3b26
SHA512

00e0d5d371659a3d82e7fcddd1244a1d878f09245e7f0f6579339893d00996b59ad393826b6e5869b815b123b6a2e419fcf0dd61a3412d6a54af38ffb3c0f6a0
SSDEEP

1536:sgSrwwpYyUm+NnvcXmZXwxOovb9gJWJYIZ2M:s8JlmenvcX7xXb+9IZb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf140f560155d7eb7fa5db4f120badb1_JaffaCakes118

Files

bf140f560155d7eb7fa5db4f120badb1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

42e53c9bd79532675756618a7b3b5ada

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

decrapiafiner.pdb

Imports

kernel32

GetEnvironmentStringsW
TerminateProcess
FreeEnvironmentStringsA
IsBadCodePtr
GetTickCount
IsBadWritePtr
IsBadReadPtr
InterlockedExchangeAdd
EnterCriticalSection
DeleteCriticalSection
SetEvent
CreateTimerQueueTimer
HeapDestroy
QueryPerformanceCounter
GetFileType
GetLocaleInfoA
SetLastError
GetModuleFileNameA
WaitForMultipleObjects
HeapFree
DisconnectNamedPipe
UnmapViewOfFile
CreateNamedPipeA
GetCurrentProcessId
GetCPInfo
SetUnhandledExceptionFilter
InitializeCriticalSection
LeaveCriticalSection
DeleteTimerQueueTimer
GetVersionExA
lstrcatW
GetStdHandle
InterlockedCompareExchange
LCMapStringA
ReleaseMutex
WaitForSingleObject
InterlockedExchange
GetSystemInfo
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
ResetEvent
WriteFile
OpenProcess
LCMapStringW
HeapAlloc
CreateMutexW
CreateEventA
WideCharToMultiByte
GetCurrentThreadId
GetSystemTimeAsFileTime
InterlockedDecrement
GetStartupInfoA
GetOEMCP
ConnectNamedPipe
FreeEnvironmentStringsW
lstrcpyW
GetLastError
DuplicateHandle
GetBinaryTypeA
GetACP
RtlUnwind
GetEnvironmentStrings
UnhandledExceptionFilter

user32

wsprintfW
LoadIconA
DrawIcon
CreateIconFromResource

advapi32

InitializeSecurityDescriptor
GetUserNameA
SetSecurityDescriptorDacl

msvcrt

memset

Exports

Exports

dfaxjhtaa

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42e53c9bd79532675756618a7b3b5ada

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 56KB

.data Size: 19KB - Virtual size: 49KB

.rsrc Size: 1024B - Virtual size: 760B

.reloc Size: 1024B - Virtual size: 704B

.text
Size: 57KB - Virtual size: 56KB

.data
Size: 19KB - Virtual size: 49KB

.rsrc
Size: 1024B - Virtual size: 760B

.reloc
Size: 1024B - Virtual size: 704B