fb4d330648556b4e4b6ae9daf2b7506e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fb4d330648556b4e4b6ae9daf2b7506e_JaffaCakes118
Size

583KB
MD5

fb4d330648556b4e4b6ae9daf2b7506e
SHA1

cfbfd595ad958311a05de74a0aa5193d5f9f412a
SHA256

f6836f62ad98faecbcf1f897397058756a70a4ebf55723c70de32e36a36980ad
SHA512

be42b41b73c4f1e1f378e69ff2cde8996530f7dc315cc604c91322d8902d71de639075654a802bc508445316b5fd004113765efd2dab8f35cf3fbd79de12ef71
SSDEEP

12288:ar2Dwth2wFbErmalz4V2DqnJAfdre2AhPByUl1rNbgFQbmMZkINi:e2DwthZWlAJAfdrqPBrJgFikd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb4d330648556b4e4b6ae9daf2b7506e_JaffaCakes118

Files

fb4d330648556b4e4b6ae9daf2b7506e_JaffaCakes118
.dll windows:5 windows x86 arch:x86

ab93342d00ce4c8faa5550ae31e1e6e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\11\Fine\Certain\Found\42\24\60\enemy\97\dress\24\Bed\14\even\Rain.pdb

Imports

kernel32

FindFirstFileA
TlsAlloc
Sleep
VirtualProtect
GetTempPathA
GetModuleFileNameA
SetEnvironmentVariableA
FindNextFileA
CompareStringA
CloseHandle
SetFilePointer
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FindClose
LoadLibraryA
WaitForSingleObject
DeviceIoControl
GetDateFormatA
GetVersionExA
GetModuleHandleA
OpenProcess
GetSystemTime
GetVolumeInformationA
CreateFileA
CompareStringW
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
GetCurrentThreadId
GetCommandLineA
HeapValidate
IsBadReadPtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
GetProcAddress
TlsGetValue
GetModuleHandleW
TlsSetValue
TlsFree
SetLastError
GetLastError
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetTickCount
GetCurrentProcessId
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

WindowFromPoint
LoadIconA
ReleaseCapture
OffsetRect
GetMessageA
CloseClipboard
EndDialog

ole32

CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoUninitialize

comdlg32

GetSaveFileNameA
CommDlgExtendedError
ChooseFontA
GetFileTitleA
ChooseColorA
GetOpenFileNameA

comctl32

ImageList_GetIcon
ord17
ImageList_BeginDrag
ImageList_DragShowNolock
_TrackMouseEvent

Exports

Exports

Help3
Provesettle
Tubemelody

Sections

.text
Size: 542KB - Virtual size: 542KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab93342d00ce4c8faa5550ae31e1e6e9

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

comdlg32

comctl32

Exports

Exports

Sections

.text Size: 542KB - Virtual size: 542KB

.data Size: 6KB - Virtual size: 5.1MB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 30KB - Virtual size: 29KB

.text
Size: 542KB - Virtual size: 542KB

.data
Size: 6KB - Virtual size: 5.1MB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 30KB - Virtual size: 29KB