d3d57078f64e03390d388d0590d55e35_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d3d57078f64e03390d388d0590d55e35_JaffaCakes118
Size

78KB
MD5

d3d57078f64e03390d388d0590d55e35
SHA1

822b40f8fc236a91382cac2c1ebd69d259260e60
SHA256

47b212410b38f0f909056c4942710fd3f7bcbcc59ec4cbcd5787cb4f7d32d2a8
SHA512

4884473521c8573fb87bb9e0b3e01ddf0b3410b138166607f516f5d298ebfb19a20177d73b5e54939dc56134820a682b12f2fbd123461bdeb52935f8d9b13fd2
SSDEEP

768:gf98tv/a/gbpqrD3qFZtfLKu7UVA5LOLah7o2CYFskGVPoslaEp5gEwpXU1:m98tvi/jf8DKwSUo2C3PPosl55xw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d57078f64e03390d388d0590d55e35_JaffaCakes118

Files

d3d57078f64e03390d388d0590d55e35_JaffaCakes118
.dll windows:5 windows x86 arch:x86

4497e48700d50127ea34fed4172ceb39

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Projects\WinRAR\FormatSrc\7z\build\32\Release\7z.pdb

Imports

kernel32

GetLastError
SetFilePointer
GetFileType
WriteFile
ReadFile
CompareStringA
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
FreeLibrary
LoadLibraryA
AreFileApisANSI
LoadLibraryW
FileTimeToDosDateTime
FileTimeToLocalFileTime
SetFileAttributesA
RemoveDirectoryA
CreateDirectoryA
CloseHandle
RemoveDirectoryW
CreateDirectoryW
FindClose
FindFirstFileA
FindFirstFileW
SetLastError
GetFileSize
SetFileTime
SetEndOfFile
GetProcAddress
LCMapStringW
LCMapStringA
GetStringTypeW
GetVersionExA
CreateFileW
SetFileAttributesW
CreateFileA
GetStringTypeA
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetStdHandle
GetModuleFileNameA
HeapFree
HeapAlloc
Sleep
GetModuleHandleA
ExitProcess
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
HeapSize
GetVersion
InitializeCriticalSectionAndSpinCount

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

oleaut32

VariantClear
SysFreeString
SysAllocString

Exports

Exports

Close
Extract
GetListItem
Open
OpenW
Prepare

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4497e48700d50127ea34fed4172ceb39

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

oleaut32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 52KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 3KB - Virtual size: 15KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 53KB - Virtual size: 52KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 3KB - Virtual size: 15KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 6KB - Virtual size: 6KB