d26885945eb4456891a98cf5150c51bb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
d26885945eb4456891a98cf5150c51bb_JaffaCakes118
Size 1.2MB
Sample240907-vfberaweng
SHA256 72a98167067dce07044af99248b5e58b14dcdad86d1e6e1a677014103bb08698
MD5 d26885945eb4456891a98cf5150c51bb
SHA1 2a51c4f78684aff8b1b4ee5831bc78276d7c0c02
SHA512 aa8f8b39916d5ad5b0ed3fc278abb0912f899e85f333ed1772c87e104e7c5bbcda1251c2f16f4682c2b26f36228330f234264de60c8e88916c36dacecf916a76
SSDEEP 24576:juYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9N:N9cKrUqZWLAcU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d26885945eb4456891a98cf5150c51bb_JaffaCakes118

File Explorer

d26885945eb4456891a98cf5150c51bb_JaffaCakes118

.dll 1.2MB

d26885945eb4456891a98cf5150c51bb_JaffaCakes118

IMPHASH 1719e6eb79abbb745bd327c250f33bb3
SHA256 72a98167067dce07044af99248b5e58b14dcdad86d1e6e1a677014103bb08698
MD5 d26885945eb4456891a98cf5150c51bb
SHA1 2a51c4f78684aff8b1b4ee5831bc78276d7c0c02
SHA512 aa8f8b39916d5ad5b0ed3fc278abb0912f899e85f333ed1772c87e104e7c5bbcda1251c2f16f4682c2b26f36228330f234264de60c8e88916c36dacecf916a76
SSDEEP 24576:juYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9N:N9cKrUqZWLAcU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

933952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

CopyPropVariant CreatePropVariant CreatePropertyStore DestroyPropVariant FormatTagFromWfx GetAMSubtypeFromD3DFormat GetD3DFormatFromMFSubtype LFGetGlobalPool MFAddPeriodicCallback MFAllocateWorkQueue MFAllocateWorkQueueEx MFAppendCollection MFAverageTimePerFrameToFrameRate MFBeginCreateFile MFBeginGetHostByName MFBeginRegisterWorkQueueWithMMCSS MFBeginUnregisterWorkQueueWithMMCSS MFBlockThread MFCalculateBitmapImageSize MFCalculateImageSize MFCancelCreateFile MFCancelWorkItem MFCompareFullToPartialMediaType MFCompareSockaddrAddresses MFConvertColorInfoFromDXVA MFConvertColorInfoToDXVA MFConvertFromFP16Array MFConvertToFP16Array MFCopyImage MFCreateAMMediaTypeFromMFMediaType MFCreateAlignedMemoryBuffer MFCreateAsyncResult MFCreateAttributes MFCreateAudioMediaType MFCreateCollection MFCreateEventQueue MFCreateFile MFCreateGuid MFCreateLegacyMediaBufferOnMFMediaBuffer MFCreateMFByteStreamOnStream MFCreateMFVideoFormatFromMFMediaType MFCreateMediaBufferWrapper MFCreateMediaEvent MFCreateMediaType MFCreateMediaTypeFromRepresentation MFCreateMemoryBuffer MFCreateMemoryStream MFCreatePathFromURL MFCreatePresentationDescriptor MFCreateSample MFCreateSocket MFCreateSocketListener MFCreateSourceResolver MFCreateStreamDescriptor MFCreateSystemTimeSource MFCreateSystemUnderlyingClock MFCreateTempFile MFCreateTransformActivate MFCreateURLFromPath MFCreateUdpSockets MFCreateVideoMediaType MFCreateVideoMediaTypeFromBitMapInfoHeader MFCreateVideoMediaTypeFromBitMapInfoHeaderEx MFCreateVideoMediaTypeFromSubtype MFCreateVideoMediaTypeFromVideoInfoHeader MFCreateVideoMediaTypeFromVideoInfoHeader2 MFCreateWaveFormatExFromMFMediaType MFDeserializeAttributesFromStream MFDeserializeEvent MFDeserializeMediaTypeFromStream MFDeserializePresentationDescriptor MFEndCreateFile MFEndGetHostByName MFEndRegisterWorkQueueWithMMCSS MFEndUnregisterWorkQueueWithMMCSS MFFrameRateToAverageTimePerFrame MFFreeAdaptersAddresses MFGetAdaptersAddresses MFGetAttributesAsBlob MFGetAttributesAsBlobSize MFGetConfigurationDWORD MFGetConfigurationPolicy MFGetConfigurationStore MFGetConfigurationString MFGetIoPortHandle MFGetMFTMerit MFGetNumericNameFromSockaddr MFGetPlaneSize MFGetPlatform MFGetPlatformVersion MFGetPluginControl MFGetPrivateWorkqueues MFGetRandomNumber MFGetSockaddrFromNumericName MFGetStrideForBitmapInfoHeader MFGetSystemTime MFGetTimerPeriodicity MFGetUncompressedVideoFormat MFGetWorkQueueMMCSSClass MFGetWorkQueueMMCSSTaskId MFHeapAlloc MFHeapFree MFInitAMMediaTypeFromMFMediaType MFInitAttributesFromBlob MFInitMediaTypeFromAMMediaType MFInitMediaTypeFromMFVideoFormat MFInitMediaTypeFromMPEG1VideoInfo MFInitMediaTypeFromMPEG2VideoInfo MFInitMediaTypeFromVideoInfoHeader MFInitMediaTypeFromVideoInfoHeader2 MFInitMediaTypeFromWaveFormatEx MFInitVideoFormat MFInitVideoFormat_RGB MFInvokeCallback MFIsFeatureEnabled MFIsQueueThread MFJoinIoPort MFLockPlatform MFLockWorkQueue MFPlatformBigEndian MFPlatformLittleEndian MFPutWorkItem MFPutWorkItemEx MFRecordError MFRemovePeriodicCallback MFScheduleWorkItem MFScheduleWorkItemEx MFSerializeAttributesToStream MFSerializeEvent MFSerializeMediaTypeToStream MFSerializePresentationDescriptor MFSetSockaddrAny MFShutdown MFStartup MFStreamDescriptorProtectMediaType MFTEnum MFTEnumEx MFTGetInfo MFTRegister MFTRegisterLocal MFTRegisterLocalByCLSID MFTUnregister MFTUnregisterLocal MFTUnregisterLocalByCLSID MFTraceError MFTraceFuncEnter MFUnblockThread MFUnlockPlatform MFUnlockWorkQueue MFUnwrapMediaType MFValidateMediaTypeSize MFWrapMediaType MFllMulDiv PropVariantFromStream PropVariantToStream ValidateWaveFormat

Name

.text

Size

911KB

Virtual Size

910KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

206KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

d26885945eb4456891a98cf5150c51bb_JaffaCakes118

gdi32

advapi32

kernel32

user32

comdlg32

generic