ee960471f46f1f9c3251723a9dcbe0f2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ee960471f46f1f9c3251723a9dcbe0f2_JaffaCakes118
Size

10KB
MD5

ee960471f46f1f9c3251723a9dcbe0f2
SHA1

5047b4ac6ae0d5db8de15ac1df9cc142464c3232
SHA256

69c6fdf358e370356e242eceb9f8f021703b5472b9efc5832ee12396b4a48bc3
SHA512

fcc52c5ec1c7ab210c2814897b10f06f362d12979583076ca717ee7c618b00d3ab27694b9b05b9c6a26f2445fa09b196fbc5cc6abb96b740048bf1c80e123811
SSDEEP

96:PfS/8nHaM2zE2YbTv5bVeODTj3G3ykNhc7+PO/cc94cl/Xu:nH52+r5PDTqy2Kcc94c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee960471f46f1f9c3251723a9dcbe0f2_JaffaCakes118

Files

ee960471f46f1f9c3251723a9dcbe0f2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7985010f27486c906f52dbed443626f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_strdup
abort
calloc
fwrite
memcpy
vfprintf

msvcr90

__dllonexit
_errno
_iob
fflush
fprintf
free
malloc

python27

PyArg_ParseTuple
PyErr_NoMemory
PyErr_Print
PyErr_SetString
PyEval_RestoreThread
PyEval_SaveThread
PyExc_ValueError
PyOS_ReadlineFunctionPointer
PyObject_CallFunction
PyString_AsString
PyThreadState_Get
PyThreadState_Swap
Py_InitModule4
_Py_NoneStruct

Exports

Exports

init_rlsetup

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 120B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7985010f27486c906f52dbed443626f5

Headers

File Characteristics

Imports

kernel32

msvcrt

msvcr90

python27

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 1024B - Virtual size: 572B

.eh_fram Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 120B

.edata Size: 512B - Virtual size: 76B

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 512B - Virtual size: 340B

.text
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 1024B - Virtual size: 572B

.eh_fram
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 120B

.edata
Size: 512B - Virtual size: 76B

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 512B - Virtual size: 340B