d3eb627284d33b21e3601747891045ad_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d3eb627284d33b21e3601747891045ad_JaffaCakes118
Size

60KB
MD5

d3eb627284d33b21e3601747891045ad
SHA1

6f703d8c2834c3182e4f085579253988511a9429
SHA256

71ea02701dde7ae4e5bc6e8c133d5643eca67322d2663c0109f726dac0fce4e0
SHA512

4b8feda6f297ff44bdb57a7e8e236c320817755421871c8718d7200d82e048b69c22e0e3032ca685cbfd5cad5225c1409445d5791d553331a568650360691b1a
SSDEEP

1536:bjwPXBrkpESDdXjdmrx/62YHGcAy9NsM8tosRuF9F83QHeoOVzz:gXGWStEgHGcNzscFv8311z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3eb627284d33b21e3601747891045ad_JaffaCakes118

Files

d3eb627284d33b21e3601747891045ad_JaffaCakes118
.dll windows:4 windows x86 arch:x86

57b58ac8a2ff4d2f607f8e61dae0d56e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetCommandLineA
GetTickCount
LocalAlloc
LocalFree
lstrlenW
lstrcpyW
GetLocalTime
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection

msvcrt

_write
_sopen
_setmode
isspace
isdigit
isxdigit
_errno
strtoul
toupper
_close
_iob
fputc
fgetc
fread
fflush
malloc
__pioinfo
_lseek
memcpy
_XcptFilter
free
_initterm
_adjust_fdiv
_except_handler3
__CxxFrameHandler
??3@YAXPAX@Z
memmove

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57b58ac8a2ff4d2f607f8e61dae0d56e

Headers

File Characteristics

Imports

kernel32

msvcrt

msvcp60

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 34KB - Virtual size: 68KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 34KB - Virtual size: 68KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 1KB - Virtual size: 1KB