bfb3c53690d6a2c50050c9de2396bdc2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bfb3c53690d6a2c50050c9de2396bdc2_JaffaCakes118
Size

128KB
MD5

bfb3c53690d6a2c50050c9de2396bdc2
SHA1

36c759f17ea466c837f2e46cbd0d281eba270bc5
SHA256

73e18c7c9e1deb5b5470294f4ff0627cfe8287c3ddeedd6b8ab5f3c0c1749381
SHA512

1fa99caa88ab369f353ce17538c1473f8de00f7d465883cac8d50e00bec849e79aa166d4ec2daecf91d58aee51323453f6fdaed0e708d566c0ee1e3d5273a593
SSDEEP

3072:j0veLDpqONHScSq9NMEEqDXfmbIz8CxOwzfui5VmqO:54ONy7QLXu/C8wz2OEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfb3c53690d6a2c50050c9de2396bdc2_JaffaCakes118

Files

bfb3c53690d6a2c50050c9de2396bdc2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bdf6407b22d9b4f7ac78d2a9d0462c09

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedDecrement
CloseHandle
FreeLibrary
CompareStringA
InterlockedExchange
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
GetLastError
SetLastError

ole32

CoCreateInstance

oleaut32

VariantChangeType
SysStringLen
SysAllocStringLen
VariantClear
SysFreeString
SysAllocString

msvcrt

_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
free
__CxxFrameHandler
??2@YAPAXI@Z
wcscmp
swscanf
swprintf

Exports

Exports

DE_MusicCloseFavorSettingProject
DE_MusicCloseMobileInfoParserProject
DE_MusicCloseSaveMobileInfoParserProject
DE_MusicCloseSaveSettingProject
DE_MusicDeleteMobileInfoItem
DE_MusicDeleteSettingItem
DE_MusicDumpMobileInfoParser
DE_MusicDumpSetting
DE_MusicGetFavorSettingCount
DE_MusicGetFavorSettingItem
DE_MusicGetMobileAudioFormatInfoCount
DE_MusicGetMobileInfoCount
DE_MusicGetMobileInfoItem
DE_MusicInitFavorSetting
DE_MusicInitMobileInfoParser
DE_MusicInitSaveMobileInfoParser
DE_MusicInitSaveSetting
DE_MusicOpenFavorSettingProject
DE_MusicOpenMobileInfoParserProject
DE_MusicOpenSaveMobileInfoParserProject
DE_MusicOpenSaveSettingProject
DE_MusicUninitFavorSetting
DE_MusicUninitMobileInfoParser
DE_MusicUninitSaveMobileInfoParser
DE_MusicUninitSaveSetting

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdf6407b22d9b4f7ac78d2a9d0462c09

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

msvcrt

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 56KB - Virtual size: 54KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 56KB - Virtual size: 54KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB