fd13d586bb1961e32e1a2bb8cc49fddb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd13d586bb1961e32e1a2bb8cc49fddb_JaffaCakes118
Size

119KB
MD5

fd13d586bb1961e32e1a2bb8cc49fddb
SHA1

13d02b3742a207ea6070f78b072b88675f6bb75b
SHA256

06cee5330ebfbef403fa9caa9e8f29f7ff8643758ca3badea631990a872591e0
SHA512

61fec43b045f1c0c02b7627c745d3cfaf2d37aab2eb70040a5578d212a38cbcfc96096417562e398251efd18f4cd06373eb31610b0917f49ec44eecce24ffd1a
SSDEEP

3072:g6/P3chAVKMVFABM4OaePTVPGsJXPKDW2:F/PclS4OaePTssdPi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd13d586bb1961e32e1a2bb8cc49fddb_JaffaCakes118

Files

fd13d586bb1961e32e1a2bb8cc49fddb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

187c70f0d762b1276768c11331173463

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualProtect
GetWindowsDirectoryA
_lclose
FreeLibrary
HeapAlloc
ExitThread
FindFirstFileW
GetLastError
GetStringTypeW
WriteConsoleW
CallNamedPipeW
OutputDebugStringA
GetCurrentProcess
CallNamedPipeA
GetProcAddress
GetModuleHandleA
CreateHardLinkA
VirtualAlloc
LoadLibraryW
DeleteAtom
lstrlenA

msvcrt

_exit
_iob
_except_handler3
strncpy
_wtol
swprintf
wcscat
_purecall
_controlfp
_vsnprintf
_snwprintf
isalpha
wcscpy
isdigit
__initenv
__CxxFrameHandler
wcscmp
_ftol
_c_exit
__dllonexit
_wcmdln
malloc
swscanf
wcschr
__p__fmode
_adjust_fdiv
free
__winitenv
memcpy
_cexit
__p__commode
wcslen

user32

GetProcessWindowStation
ReleaseDC
LoadImageW
GetCursorPos
MapWindowPoints
CopyRect
SetCapture
DispatchMessageW
LoadCursorW
DestroyWindow
SetScrollPos
DialogBoxParamA
RegisterClassA
GetParent
LoadCursorA
wsprintfW
SendMessageA
ClientToScreen
LoadMenuW
ReleaseCapture
CheckDlgButton
BeginPaint
ScreenToClient
IsWindow
SendMessageW
GetMenuItemCount
UnregisterClassW

shell32

SHGetFolderPathW
SHGetFileInfoW
SHGetPathFromIDListW
ShellExecuteW

opengl32

wglShareLists
glColor4i
glTexCoord2d
GlmfBeginGlsBlock
glColor4f
glColor3ui
glColor4d
glStencilMask
glFogfv
glTexCoord2dv

Exports

Exports

KmmbTobyhhTytqsGf
BxsUoytkpPsl
TanudMqnek

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

187c70f0d762b1276768c11331173463

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

shell32

opengl32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 124B

.data Size: 68KB - Virtual size: 67KB

.rsrc Size: 31KB - Virtual size: 31KB

.reloc Size: 512B - Virtual size: 102B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 124B

.data
Size: 68KB - Virtual size: 67KB

.rsrc
Size: 31KB - Virtual size: 31KB

.reloc
Size: 512B - Virtual size: 102B