feda0152610f144fe123e235dcdb024f_JaffaCakes118

General

Target

feda0152610f144fe123e235dcdb024f_JaffaCakes118
Size

12KB
MD5

feda0152610f144fe123e235dcdb024f
SHA1

25948dfb76ec596ec4426df31625632c7b2f2c1d
SHA256

13b135cda6e8fb9ca05548d68ca87b6fef662a88040c3a4cb607c293d754df1d
SHA512

2987f4658c2faf7e244f2ce20a9b817940ebf138f9f577794b19441100ca84f998f7c719c5c3dd4965f92f695d8d2648c3ed6d872b96b8d58d1748453b8f4ab4
SSDEEP

192:7u0N7oER4VCNsr8VTnhpTmg1IFsAAc8O9wmHo3X+cqcKx5YK:7u0N7oER4VCNRVThpTmg1I9f59jYuzYK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feda0152610f144fe123e235dcdb024f_JaffaCakes118

Files

feda0152610f144fe123e235dcdb024f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1159c081635c24cd0313da3c8c0df451

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\ferry\Desktop\10 akhir\Release\pekalongancz.pdb

Imports

kernel32

IsBadHugeReadPtr
Sleep
IsBadWritePtr
GetModuleHandleA
VirtualProtect
CreateThread
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent

user32

GetAsyncKeyState
MessageBoxA
FindWindowA
MessageBeep

msvcr90

_decode_pointer
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_encoded_null
free
_malloc_crt
_encode_pointer
system
memmove
_initterm

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1159c081635c24cd0313da3c8c0df451

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcr90

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 884B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 1024B - Virtual size: 688B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 884B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 1024B - Virtual size: 688B