eb4c049d16cb41ee97298fd28cc9aa9f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eb4c049d16cb41ee97298fd28cc9aa9f_JaffaCakes118
Size

479KB
MD5

eb4c049d16cb41ee97298fd28cc9aa9f
SHA1

ce7a70370d7c9186b1c0438db05e6e97ebec9928
SHA256

9b5fdde9f56e81369e4a983a4b7713419d95bfc173ecd14b22606864d2530d83
SHA512

0dd8481891cec3cc2e6ba847c4cc384f6cab2c2c6b0209e9fd5e40cf02246d2cd89c1e3e0598a49569f58331c48dd734be9d925f537b7bd15173d2d3d24b946f
SSDEEP

12288:nuMM7jKjTvaZJTgz/oaO7biJlntkWjgEv+4oe8VjWnFQa:uMM7jKv2cobOJ3jgEm4ooQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb4c049d16cb41ee97298fd28cc9aa9f_JaffaCakes118

Files

eb4c049d16cb41ee97298fd28cc9aa9f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5ef1a99ad0fb8258c83f3b2d119aea21

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crtdll

raise
iswgraph
_mbsnbcpy
_mbclen
_finite
rand
_exit

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

rpcrt4

short_from_ndr
float_from_ndr
float_array_from_ndr
enum_from_ndr
data_into_ndr
RpcTestCancel
RpcStringBindingParseA
RpcSsSetClientAllocFree
RpcSsEnableAllocate
RpcSsDestroyClientContext
RpcSsAllocate
RpcSmSetThreadHandle
RpcSmSetClientAllocFree
RpcSmFree
RpcServerUseAllProtseqsIfEx
RpcServerRegisterIfEx
RpcRaiseException
RpcObjectInqType
RpcMgmtWaitServerListen
RpcMgmtSetCancelTimeout
RpcMgmtInqStats
RpcMgmtEpEltInqNextA
RpcBindingSetObject
MesDecodeIncrementalHandleCreate
MesDecodeBufferHandleCreate
DceErrorInqTextA
CStdStubBuffer_CountRefs
tree_peek_ndr

ntdll

NtQuerySystemInformation
wcslen
NtCreateEvent
NtCreateSection
NtCreateSymbolicLinkObject
NtOpenThread
NtOpenThreadToken
NtQueryDefaultLocale
NtQueryInformationProcess
NtQueryInstallUILanguage
NtSetInformationObject
NtUnmapViewOfSection
NtWriteVirtualMemory
RtlAnsiStringToUnicodeString
RtlAppendUnicodeStringToString
RtlCreateTagHeap
RtlFreeSid
RtlLeaveCriticalSection
RtlNtStatusToDosError
RtlQueryRegistryValues

kernel32

EnumResourceTypesA
ExitProcess
FreeResource
GetACP
GetCommandLineA
GetDateFormatA
GetLocalTime
lstrlenA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
VirtualFree
VirtualAlloc
UnmapViewOfFile
TlsSetValue
TlsAlloc
Sleep
SetUnhandledExceptionFilter
SetLastError
SetEndOfFile
SetCurrentDirectoryA
ReadFile
OpenFile
LocalAlloc
HeapAlloc
GetStartupInfoA
GetOEMCP
GetModuleHandleA
EnterCriticalSection

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 415KB - Virtual size: 983KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ef1a99ad0fb8258c83f3b2d119aea21

Headers

DLL Characteristics

File Characteristics

Imports

crtdll

version

rpcrt4

ntdll

kernel32

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 415KB - Virtual size: 983KB

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 415KB - Virtual size: 983KB

.rsrc
Size: 31KB - Virtual size: 30KB