d2199957f131b3dfcd4b1733dc438095_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d2199957f131b3dfcd4b1733dc438095_JaffaCakes118
Size

520KB
MD5

d2199957f131b3dfcd4b1733dc438095
SHA1

dcce64fadbc115073c6a66ce964eae4612e38c68
SHA256

bfd1dd78ba995d9d918d20ba88d8ac378cbbcdf0a31da7e28344bf3aabf344eb
SHA512

797cf04c5a5b32b4ed6164ef3f569467b545575503f4181d7d74c2b52e06f14dfe33b544b284b017d6ee9d86d193e97f2ca1a0aac11ccb496d1670f8fc063dd4
SSDEEP

6144:B23Pqmy7uW/V8RGcj2Dh0/YOuJotX0gi844EKbC:Yy7z/V8Rhj2nOfegiqEv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2199957f131b3dfcd4b1733dc438095_JaffaCakes118

Files

d2199957f131b3dfcd4b1733dc438095_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3aa10c7704f9cca33d02dc1c64364942

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleFileNameA
DisableThreadLibraryCalls
VirtualProtect
CreateFileA
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
RtlUnwind
IsBadWritePtr
IsBadReadPtr
HeapValidate
RaiseException
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetConsoleCtrlHandler
IsBadCodePtr
UnhandledExceptionFilter
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
ReadFile
GetCPInfo
GetACP
GetOEMCP
Sleep
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
GetLocaleInfoW
SetEndOfFile

user32

SetWindowLongA
SetWindowPos

d3dx9_26

D3DXCreateFontIndirectA

Sections

.text
Size: 448KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3aa10c7704f9cca33d02dc1c64364942

Headers

File Characteristics

Imports

kernel32

user32

d3dx9_26

Sections

.text Size: 448KB - Virtual size: 445KB

.rdata Size: 32KB - Virtual size: 30KB

.data Size: 16KB - Virtual size: 21KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 448KB - Virtual size: 445KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 16KB - Virtual size: 21KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 16KB - Virtual size: 15KB