173549180fa4cc0a909f7eb503ce40bd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

173549180fa4cc0a909f7eb503ce40bd_JaffaCakes118
Size

68KB
MD5

173549180fa4cc0a909f7eb503ce40bd
SHA1

00c297c94e26ee79bdcec7d4d2baf13432e10958
SHA256

bdb9b349571a5829baabfe18eebebc7637d9223c36720af78c62c1380258ae9a
SHA512

1a7ba8edd68e80ce6f599deaa34a37b234548ac4f510464d12bfb8de833c91f7b30951df81312345906071304fd27d9986ae8ad05a0299fb374bd1695f2be0da
SSDEEP

768:fb9lE9x/tHCTn7BWJ2uBTbnCzwiVD39VY3VkoYF9l6JMCAPK9Zp7F:fhyN5+n7BI2uTwhy3VkjF9lR67F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173549180fa4cc0a909f7eb503ce40bd_JaffaCakes118

Files

173549180fa4cc0a909f7eb503ce40bd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7e41369cc90935168513a5d0804b96d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
MultiByteToWideChar
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
TerminateProcess
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
LCMapStringA
LCMapStringW
GetLastError
FlushFileBuffers
RtlUnwind
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetLocaleInfoW
SetFilePointer
CloseHandle
SetStdHandle

Exports

Exports

idn_free
idna_to_ascii_16z
idna_to_ascii_4i
idna_to_ascii_4z
idna_to_ascii_8z
idna_to_ascii_lz
idna_to_unicode_44i
idna_to_unicode_4z4z
idna_to_unicode_8z4z
idna_to_unicode_8z8z
idna_to_unicode_8zlz
idna_to_unicode_lz16z
idna_to_unicode_lzlz
punycode_decode
punycode_encode
stringprep
stringprep_4i
stringprep_4zi
stringprep_check_version
stringprep_convert
stringprep_locale_charset
stringprep_locale_to_utf8
stringprep_profile
stringprep_ucs4_nfkc_normalize
stringprep_ucs4_to_utf16
stringprep_ucs4_to_utf8
stringprep_unichar_to_utf8
stringprep_utf16_to_ucs4
stringprep_utf8_nfkc_normalize
stringprep_utf8_to_locale
stringprep_utf8_to_ucs4
stringprep_utf8_to_unichar

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e41369cc90935168513a5d0804b96d3

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 4KB - Virtual size: 3KB