dc81349bc5f1a77ae7224063f3fbb72f_JaffaCakes118

General

Target

dc81349bc5f1a77ae7224063f3fbb72f_JaffaCakes118
Size

112KB
MD5

dc81349bc5f1a77ae7224063f3fbb72f
SHA1

eec687f48d9350c751da7e2a177e77fe31f7ae41
SHA256

3124f25f78faf6ffcddf4812aa514953dcdffb80eba063d29a11982976619109
SHA512

9c1a6ff1ba649e94157dd8b7615796d84e575dfefd3a165f004ff90c335aaad1016fb6ead52fa3666fa71023c4cf019466b8ce3efe6f4e9bd454412b8d3b3a3c
SSDEEP

1536:gMcVw2rWr7Pw4XWiBM0NFIHsx0WRQke800VxZO/k6+eamm:7x2rWr7PZXWN0id4VxZO86+e7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc81349bc5f1a77ae7224063f3fbb72f_JaffaCakes118

Files

dc81349bc5f1a77ae7224063f3fbb72f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

59b247baa7d75badd97e4983449e66d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fewiludvsj.pdb

Imports

kernel32

GetVersionExA
GetStringTypeW
SetHandleCount
lstrcmpiA
GetCPInfo
UnmapViewOfFile
lstrlenA
SetFilePointer
TerminateProcess
MoveFileW
lstrlenW
GetEnvironmentStringsW
TlsAlloc
CreateThread
GetTickCount
GetSystemTimeAsFileTime
WideCharToMultiByte
HeapReAlloc
LCMapStringA
ReleaseMutex
CloseHandle
DeleteFileA
DeleteFileW
LCMapStringW
InterlockedDecrement
GetLastError
GetCurrentThreadId
MoveFileA
QueryPerformanceCounter
SetEndOfFile
TlsGetValue
FreeLibrary
WaitForSingleObject
LocalAlloc
GetEnvironmentVariableA
CreateEventA
DisableThreadLibraryCalls
GetSystemInfo
FreeEnvironmentStringsW
GetFileSize
LocalFree
GetEnvironmentStrings
GetFullPathNameA
EnterCriticalSection
GetLocaleInfoA
CompareFileTime
OpenFileMappingW
GetStringTypeA
Sleep
CreateMutexW
HeapDestroy
VirtualAlloc
CreateFileA
HeapCreate
OpenFileMappingA
VirtualQuery
HeapFree
InterlockedExchange
SetFileTime
TlsFree
InterlockedIncrement
LeaveCriticalSection
FlushViewOfFile
lstrcmpA
VirtualFree
VirtualProtect
DeleteCriticalSection
GetCurrentProcessId
WriteFile
GetFileType
CreateMutexA
FreeEnvironmentStringsA
GetDiskFreeSpaceW
GetCurrentProcess
GetDiskFreeSpaceA
InitializeCriticalSection
MapViewOfFile
GetFullPathNameW
GetStringTypeExA
CreateFileW
SetEvent
InitializeCriticalSectionAndSpinCount

Exports

Exports

zspzrh

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59b247baa7d75badd97e4983449e66d8

Headers

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 52KB

.data Size: 28KB - Virtual size: 24KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 566B

.text
Size: 56KB - Virtual size: 52KB

.data
Size: 28KB - Virtual size: 24KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 566B