ea6ee6bad40f87001a7477837a277130_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ea6ee6bad40f87001a7477837a277130_JaffaCakes118
Size

4.0MB
MD5

ea6ee6bad40f87001a7477837a277130
SHA1

d3dc71d3c1fc035f10aeae0ffbac05b102fc9710
SHA256

a3d6649dd7dc48df670cc3255c97ee4e8e98b08750a11bfb92f97efc45f4c05b
SHA512

34b765d851f08d7484fdbb3d8a6195fff967f5571e38f7ee6ea3d432d1206703336e52fb13f92972ff52b1e98fae602d9173008e8858e92c03ea701f32dd652c
SSDEEP

98304:9/AaSJTDAY5VY4SEQvWkhRIamGYKXVa0v4hh4ApB242p00hJ9H:9/TSJTDAYBSXFYamGYKXVa0v4hh4ApBm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea6ee6bad40f87001a7477837a277130_JaffaCakes118

Files

ea6ee6bad40f87001a7477837a277130_JaffaCakes118
.dll windows:4 windows x86 arch:x86

468bdcac7cd8809af7b7f9d266484e8b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__dllonexit
__mb_cur_max
__setusermatherr
_amsg_exit
_errno
_exit
_initterm
_iob
_lock
_onexit
_unlock
_winmajor
abort
acos
atan
atan2
atof
atoi
atol
calloc
ceil
fclose
feof
fflush
fgets
floor
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getchar
getenv
localeconv
malloc
memcpy
memmove
memset
raise
setlocale
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strstr
strtol
tan
vfprintf
vprintf
vsprintf
wcslen

user32

MessageBoxA

Exports

Exports

aacDecoder_AncDataGet
aacDecoder_AncDataInit
aacDecoder_Close
aacDecoder_ConfigRaw
aacDecoder_DecodeFrame
aacDecoder_Fill
aacDecoder_GetFreeBytes
aacDecoder_GetLibInfo
aacDecoder_GetStreamInfo
aacDecoder_Open
aacDecoder_SetParam
aacEncClose
aacEncEncode
aacEncGetLibInfo
aacEncInfo
aacEncOpen
aacEncoder_GetParam
aacEncoder_SetParam

Sections

.text
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 570B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/35
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/51
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/63
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/77
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/89
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/124
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

468bdcac7cd8809af7b7f9d266484e8b

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 533KB - Virtual size: 532KB

.data Size: 512B - Virtual size: 356B

.rdata Size: 115KB - Virtual size: 114KB

.bss Size: - Virtual size: 11KB

.edata Size: 1024B - Virtual size: 570B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 9KB - Virtual size: 8KB

/4 Size: 5KB - Virtual size: 4KB

/19 Size: 31KB - Virtual size: 30KB

/35 Size: 22KB - Virtual size: 22KB

/51 Size: 1.2MB - Virtual size: 1.2MB

/63 Size: 92KB - Virtual size: 91KB

/77 Size: 224KB - Virtual size: 223KB

/89 Size: 49KB - Virtual size: 48KB

/102 Size: 24KB - Virtual size: 24KB

/113 Size: 1.2MB - Virtual size: 1.2MB

/124 Size: 286KB - Virtual size: 286KB

.text
Size: 533KB - Virtual size: 532KB

.data
Size: 512B - Virtual size: 356B

.rdata
Size: 115KB - Virtual size: 114KB

.bss
Size: - Virtual size: 11KB

.edata
Size: 1024B - Virtual size: 570B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 9KB - Virtual size: 8KB

/4
Size: 5KB - Virtual size: 4KB

/19
Size: 31KB - Virtual size: 30KB

/35
Size: 22KB - Virtual size: 22KB

/51
Size: 1.2MB - Virtual size: 1.2MB

/63
Size: 92KB - Virtual size: 91KB

/77
Size: 224KB - Virtual size: 223KB

/89
Size: 49KB - Virtual size: 48KB

/102
Size: 24KB - Virtual size: 24KB

/113
Size: 1.2MB - Virtual size: 1.2MB

/124
Size: 286KB - Virtual size: 286KB