14ecd0e724920f831c0ee33dba2826c8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

14ecd0e724920f831c0ee33dba2826c8_JaffaCakes118
Size

559KB
MD5

14ecd0e724920f831c0ee33dba2826c8
SHA1

c8128ee0dd4bf03f2165fa640076855e70a42132
SHA256

a1fd600f719252600c4bb51f2718bb66cd532a7c3eb275f2d551a6e3b2f275e5
SHA512

868dcf63aeea7fc52474122ee4f9057b383d835432bff353696977c73423dfaa5950ef2ccd10fb246e98aadef97b689e05e8b36210d21de4dc9807479a3ed8e2
SSDEEP

12288:jnl8oiM/YqPtnX+STcKsnCPn1P9dkrQkazv4EP+ejtoOSoqBhAsVwh7lJ+C:jZvgqPJcHnALntP1QhA5/f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ecd0e724920f831c0ee33dba2826c8_JaffaCakes118

Files

14ecd0e724920f831c0ee33dba2826c8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Exports

Exports

kdfAutoStart
kdfAutoStartClean
kdfAutoStartCleanB
kdfAutoStartCleanD
kdfAutoStartV
kdfCkeckKeylogger
kdfExProtect
kdfGetVersion
kdfSelfCheckIntegrity
kdfSetFlashE2E_INJ
kdfSetImageDir
kdfWebBrowserContextMenu
kdfWebBrowserHandleAdd
kdfWebBrowserHandleRemove

Sections

.text
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

b7om3.dp
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ivahhaht
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

q7rws2sx
Size: 628KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

13fs8o5x
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f433e7fcc51e68080022754836705744

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: - Virtual size: 76KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: - Virtual size: 32KB

.rsrc Size: 4KB - Virtual size: 1.2MB

b7om3.dp Size: - Virtual size: 12KB

ivahhaht Size: - Virtual size: 56KB

q7rws2sx Size: 628KB - Virtual size: 632KB

13fs8o5x Size: 4KB - Virtual size: 4KB

.text
Size: - Virtual size: 76KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: - Virtual size: 32KB

.rsrc
Size: 4KB - Virtual size: 1.2MB

b7om3.dp
Size: - Virtual size: 12KB

ivahhaht
Size: - Virtual size: 56KB

q7rws2sx
Size: 628KB - Virtual size: 632KB

13fs8o5x
Size: 4KB - Virtual size: 4KB