d0045c2b9089be9a1b2dfb63f25f3717_JaffaCakes118

General

Target

d0045c2b9089be9a1b2dfb63f25f3717_JaffaCakes118
Size

26KB
MD5

d0045c2b9089be9a1b2dfb63f25f3717
SHA1

0ca4859364cc4860a9cb555d618f9b426a0636e4
SHA256

4640ef18154a3047918454912ea82e5a25e9df424dc53c1707c40ae7a2689600
SHA512

168cfd913a52d8ae857a18e91be925ceae5134e77d2b1a6d8a1b08f4b12176ec540f690cfc5e9fed78640bdabdea7b3fe88ebd8aeefbe84a90dc289d5c1daa22
SSDEEP

768:QhcQoK0iikBZWAxmcRhj/flzkbGTujaw:nKzikx7j/dzk6WR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0045c2b9089be9a1b2dfb63f25f3717_JaffaCakes118

Files

d0045c2b9089be9a1b2dfb63f25f3717_JaffaCakes118
.dll windows:4 windows x86 arch:x86

762b7521dd029e02dfb8a70e4a806d55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

sprintf
strcat
fclose
fprintf
fopen
fread
fseek
strcmp
_beginthreadex
fwrite
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
_except_handler3
malloc
free
_CxxThrowException
memcmp
??2@YAPAXI@Z
memset
strcpy
__CxxFrameHandler
strlen
_ftol
ceil
memmove
memcpy
fscanf
??3@YAXPAX@Z
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z

kernel32

LoadLibraryA
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
GetWindowsDirectoryA
GetTempPathA
GetModuleFileNameA
Sleep
CreateMutexA
GetLastError
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemDirectoryA

Exports

Exports

CanShareFolderW
DllCanUnloadNow
DllGetClassObject
GetLocalPathFromNetResource
GetLocalPathFromNetResourceA
GetLocalPathFromNetResourceW
GetNetResourceFromLocalPath
GetNetResourceFromLocalPathA
GetNetResourceFromLocalPathW
IsFolderPrivateForUser
IsPathShared
IsPathSharedA
IsPathSharedW
SetFolderPermissionsForSharing
SharingDialog
SharingDialogA
SharingDialogW
ShowShareFolderUIW

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

762b7521dd029e02dfb8a70e4a806d55

Headers

File Characteristics

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB