049aa30517d38f94ea471b7456315f24_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

049aa30517d38f94ea471b7456315f24_JaffaCakes118
Size

32KB
MD5

049aa30517d38f94ea471b7456315f24
SHA1

656bd8d6079ad3eeaf9e431d4b708d24e499869c
SHA256

7b79a9addaab2fa59596f1a08f067272ac8dd8abe7c1c972c8e8481e4c63b634
SHA512

f6209a9787f9dcdf90d70c86dac05e8c5d43deccc067c5deb31e9497b50790c6344306c5a343f431aec958022f633a73b9dd9f0bc59d9173b64955aa63b9dc26
SSDEEP

384:1bUnmbUS7SKiSaAZ6g4iAuu/mfCkCQvB7onTcMjr8g9eoCX:1bUnkUm33P4ou/mfUGunH86eo8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
049aa30517d38f94ea471b7456315f24_JaffaCakes118

Files

049aa30517d38f94ea471b7456315f24_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bbab89452261eddffed148d285b1a303

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

safireu

?Do@ColorSpaceConverter@Avp@@QAEJAAVImageView@2@0W4ProcessingStyleEnum@2@PAN2@Z
?SetAlphaChannel@ColorSpaceConverter@Avp@@QAEXE@Z
??0ColorSpaceConverter@Avp@@QAE@XZ
?SetFieldOfInterest@ImageView@Avp@@QAEXW4WhichFieldEnum@2@@Z
??0ImageView@Avp@@QAE@PAVImage@1@VRectangle@1@W4WhichFieldEnum@1@@Z
??0ChromaKeyerYUV@Avp@@QAE@XZ
??0Image@Avp@@QAE@ABUImageDescriptor@1@K@Z
??0ImageDescriptor@Avp@@QAE@KKW4ColorSpaceEnum@1@W4AggregateChannelSamplingEnum@1@W4ComponentOrderEnum@1@W4PixelPackingEnum@1@W4ScanStyleEnum@1@W4FieldPackingEnum@1@W4OriginEnum@1@MW4ShapedEnum@1@@Z
?GetImageDescriptor@Image@Avp@@QAEPBUImageDescriptor@2@XZ
??1ChannelDescriptor@Avp@@QAE@XZ
?SetHueAngle@ChromaKeyerYUV@Avp@@QAEXN@Z
?SetAcceptanceAngle@ChromaKeyerYUV@Avp@@QAEXN@Z
?SetSaturationMinimum@ChromaKeyerYUV@Avp@@QAEXN@Z
?SetSpillSuppressionAngle@ChromaKeyerYUV@Avp@@QAEXN@Z
?SetSpillSuppressionGain@ChromaKeyerYUV@Avp@@QAEXN@Z
?SetKeyOffset@ChromaKeyerYUV@Avp@@QAEXN@Z
?SetKeyGain@ChromaKeyerYUV@Avp@@QAEXN@Z
?SetInvertKeyBeforePostProcessing@ChromaKeyerYUV@Avp@@QAEX_N@Z
?SetInvertKeyAfterPostProcessing@ChromaKeyerYUV@Avp@@QAEX_N@Z
?SetSplitScreenHeight@ChromaKeyerYUV@Avp@@QAEXK_N@Z
?GenerateCrCbGradient@Avp@@YAJAAVImageView@1@@Z
?Do@ChromaKeyerYUV@Avp@@QAEJAAVImageView@2@PAV32@01W4ProcessingStyleEnum@2@@Z
??1Image@Avp@@QAE@XZ
??1ChromaKeyerYUV@Avp@@QAE@XZ
?GetMemoryPointer@ImageView@Avp@@QAEPAXK@Z
?GetBytesPerLine@ImageView@Avp@@QAEJK@Z
?GetBytesPerPixel@Image@Avp@@QAEMXZ
?GetWidth@ImageView@Avp@@QAEKXZ
?GetHeight@ImageView@Avp@@QAEKXZ
??0Rectangle@Avp@@QAE@JJJJ@Z
??1ImageDescriptor@Avp@@QAE@XZ

msvcrt

_onexit
_adjust_fdiv
malloc
_initterm
??1type_info@@UAE@XZ
free
_CxxThrowException
_ftol
__CxxFrameHandler
_assert
_purecall
??2@YAPAXI@Z
__dllonexit

kernel32

GetProcAddress
FreeLibrary
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
LoadLibraryW

Exports

Exports

_createEffect@4
_registerEffects@8

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbab89452261eddffed148d285b1a303

Headers

File Characteristics

Imports

safireu

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 1004B

.reloc Size: 4KB - Virtual size: 1002B

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 1004B

.reloc
Size: 4KB - Virtual size: 1002B