d58766aadbcd645f441d1f511b9d4d3e_JaffaCakes118

General

Target

d58766aadbcd645f441d1f511b9d4d3e_JaffaCakes118
Size

69KB
MD5

d58766aadbcd645f441d1f511b9d4d3e
SHA1

407caa27e22e7026041d84be0d9fbe898123d8ff
SHA256

31c562b927fb5eadfe1a9c29c0d4de531a89c436118ae6e364552dab122bfc0d
SHA512

75fc72965eccfa9caff24aaceb6484869c5585b46c981e7ef57e37f6cf1907e658a4c6b61c4d300ede3d2e705e9bb320d9e1a10cbbd7fb8671c0bcb8aeaafa80
SSDEEP

1536:l+khGlENFuA7/Gf7E5jBmz8W7CtOywkxQBwo14Pmf:lnglE17+fQkNGVJ2z4P6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d58766aadbcd645f441d1f511b9d4d3e_JaffaCakes118

Files

d58766aadbcd645f441d1f511b9d4d3e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4de9ae33da1c5014c306f6f2a1ed3496

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedExchange
Sleep
InterlockedCompareExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CloseHandle
CreateFileW
TerminateProcess
LocalAlloc
LocalFree
RtlMoveMemory
SetLastError
LocalReAlloc
MulDiv
WideCharToMultiByte
GlobalFree
VirtualProtect
GetCommandLineA
GlobalAlloc

gdi32

GetRegionData
ExtCreateRegion
IntersectClipRect
GetClipRgn
FillPath
StrokeAndFillPath
StrokePath
SelectClipRgn
CreateRectRgn
ExtSelectClipRgn
SelectClipPath
CreatePen
GetNearestColor
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
PlayEnhMetaFile
GetWinMetaFileBits
DeleteEnhMetaFile
CloseEnhMetaFile
ExtTextOutA
GetRgnBox
CombineRgn
DeleteObject
CreateDIBSection
GetDIBits
GetObjectA
GetStockObject
CreateFontIndirectA
GetRandomRgn

msvcr71

_except_handler3
memset
_adjust_fdiv
free
atoi
memcpy
_initterm
malloc
__CppXcptFilter
__dllonexit
_onexit

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4de9ae33da1c5014c306f6f2a1ed3496

Headers

File Characteristics

Imports

kernel32

gdi32

msvcr71

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 4KB - Virtual size: 35KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 4KB - Virtual size: 35KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 1KB - Virtual size: 1KB