ce9a4e84f1bca9b16fa67a29052e80b6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ce9a4e84f1bca9b16fa67a29052e80b6_JaffaCakes118
Size

142KB
MD5

ce9a4e84f1bca9b16fa67a29052e80b6
SHA1

8688f6844952973b87cc4106ac97eb22fe6f987d
SHA256

cca28cdf6f423ea687aea44454830be05059a2c7619fac8b35dca3dd1904f273
SHA512

a4af4f749574db0964051fa3eff7a116f53e1a60be430c0c721daafb93526b17e18758058f4423b30a50aa2c1ceb8f8203886b42c10371d003a9bc45e468e35e
SSDEEP

3072:jBFJplA3VabXdCZ4g9gVpCJrw6tNU3/ZgrR61PMhUDqvaJHrzUW:dDXM4g90C32ZgrmPhDqvyLIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce9a4e84f1bca9b16fa67a29052e80b6_JaffaCakes118

Files

ce9a4e84f1bca9b16fa67a29052e80b6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Exports

Exports

kdfAutoStart
kdfAutoStartClean
kdfAutoStartCleanB
kdfAutoStartCleanD
kdfAutoStartV
kdfCkeckKeylogger
kdfExProtect
kdfGetVersion
kdfSelfCheckIntegrity
kdfSetFlashE2E_INJ
kdfSetImageDir
kdfWebBrowserContextMenu
kdfWebBrowserHandleAdd
kdfWebBrowserHandleRemove

Sections

.text
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6a0hb12r
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rgytuns8
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bila32nc
Size: 625KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oj885jhb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f433e7fcc51e68080022754836705744

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: - Virtual size: 76KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: - Virtual size: 32KB

.rsrc Size: 4KB - Virtual size: 1.2MB

6a0hb12r Size: - Virtual size: 12KB

rgytuns8 Size: - Virtual size: 56KB

bila32nc Size: 625KB - Virtual size: 628KB

oj885jhb Size: 4KB - Virtual size: 4KB

.text
Size: - Virtual size: 76KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: - Virtual size: 32KB

.rsrc
Size: 4KB - Virtual size: 1.2MB

6a0hb12r
Size: - Virtual size: 12KB

rgytuns8
Size: - Virtual size: 56KB

bila32nc
Size: 625KB - Virtual size: 628KB

oj885jhb
Size: 4KB - Virtual size: 4KB