dcb908e8ffa11e69e7e711920dd3066a_JaffaCakes118

General

Target

dcb908e8ffa11e69e7e711920dd3066a_JaffaCakes118
Size

144KB
MD5

dcb908e8ffa11e69e7e711920dd3066a
SHA1

074e3c4202ff7bad3de0de59c2b8d9ce28382758
SHA256

031179f26cbd52252a0c5b401fc6f22c553909e9ea4c64aa5441f09848e0a8b8
SHA512

92d6feeee1bf686d359f1c9bdf21a2489f1c33131990440b6b9c942d5550bd8859bd7049b07775525feab29d549af9aef7ec5241d17ec429cb7fd65b6532bde3
SSDEEP

3072:PqsIkaArBRVFaloRHbz/2bMUTfvTf++AaY8uTuKSdRHFST:PgkaA1RVFalodzejvT++3WoHy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcb908e8ffa11e69e7e711920dd3066a_JaffaCakes118

Files

dcb908e8ffa11e69e7e711920dd3066a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

32f1135f9612e7f10c345671491cb2d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

tolower
isupper
strncpy
_stricmp
__dllonexit
_onexit
_initterm
_adjust_fdiv
_ftol
memmove
_purecall
malloc
??2@YAPAXI@Z
free
??3@YAXPAX@Z
strchr
_putenv

kernel32

VirtualAlloc
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemInfo

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_PostProcess
PNStream_ReleaseFrame
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty
SetDLLAccessPath
_PNCodec_GetIPNUnknown@4

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32f1135f9612e7f10c345671491cb2d7

Headers

File Characteristics

Imports

pncrt

kernel32

advapi32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 696B

.rsrc Size: 100KB - Virtual size: 98KB

.reloc Size: 4KB - Virtual size: 932B

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 696B

.rsrc
Size: 100KB - Virtual size: 98KB

.reloc
Size: 4KB - Virtual size: 932B