fa71e17ec0a6492231c8805cfbc821d7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fa71e17ec0a6492231c8805cfbc821d7_JaffaCakes118
Size

20KB
MD5

fa71e17ec0a6492231c8805cfbc821d7
SHA1

86b6f664bf2ef1025105e1cbe75bbe70fb74f075
SHA256

97af5dd813fe72ad72e7751343522e1519ba22c28abf80a6438f751153736410
SHA512

f342775a106612d0e2e9d24d5a79887f7555fa41dc9745b4b08aa6097515f6d4ebee7e932c7f20c1bf1ff2e61e6ca8e2b475fdbe0fc364736a3e6887c1b42467
SSDEEP

384:CI2yWK2loKBtjDrjBx+FK83LPnmKwdFZwQOdds+PHl7y:Eydw9DrNx783LPCdFKysFW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa71e17ec0a6492231c8805cfbc821d7_JaffaCakes118

Files

fa71e17ec0a6492231c8805cfbc821d7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6d2f03b5af09f54c29faa9c1d240cff6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CallNamedPipeA
GetPrivateProfileSectionA
CopyFileA
OpenSemaphoreW
CreateFileMappingW
EraseTape
GetModuleHandleA
GetLocalTime
GetLastError
InterlockedCompareExchange
ReplaceFileW
MoveFileExA
QueryPerformanceFrequency
GetPrivateProfileStringW

tapi32

lineGetID
TAPIWndProc
phoneGetVolume
lineCompleteTransfer
lineGetAddressStatusA
internalRemoveLocation
lineGetAgentStatusA
phoneSetLamp
lineRemoveProvider
lineSetMediaControl
lineHandoffA
phoneGetID
lineAddProviderA
lineDeallocateCall
lineGetTranslateCapsA
lineAddProviderW
lineGetAgentInfo

msvcrt

_wunlink
??_Ebad_cast@@UAEPAXI@Z
wcslen
__set_app_type
_findfirsti64
localeconv
_wspawnlpe
_creat
_ui64tow
memcpy
_wcsrev
_wexeclp

winmm

mmioInstallIOProcA
joyGetPos
mmioOpenA
midiInPrepareHeader
mciGetDeviceIDFromElementIDA

opengl32

glTexGendv
glGenTextures
glGetPointerv
glGetMapfv
glRotatef
glTexSubImage2D
glVertex2d
glLoadMatrixd
wglRealizeLayerPalette
glListBase
glCallLists
glMateriali
glLightModeliv
glEvalPoint1
glRasterPos4d

Exports

Exports

YhlcbmFqmntSy
TdezsurWf
NmBybfmin
GfvngsCwgjtki
TggNlvhlMoosxobPsbvbk
VxTyjniby
IcjvafHibvRxzl
Tvsb
EvCbbk
FdofuNzczSmqitMgp
GdjUplsgwDasslnMdsukuAh
YufbshNfvcZpa
ZyHjaxXhtz
VibxJcggKqzgq
QzpSpmhgvrUdqqqavXewxghHa
YrmqnGknxbAms
QpmtaigUzuqpjoNvh
EunLihjqzJjpzPvnbcyl
FqFjtqCtzbpag

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d2f03b5af09f54c29faa9c1d240cff6

Headers

File Characteristics

Imports

kernel32

tapi32

msvcrt

winmm

opengl32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 20B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 20B