2bd0f80a1a698a6b94566b9d3ff92410_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2bd0f80a1a698a6b94566b9d3ff92410_JaffaCakes118
Size

53KB
MD5

2bd0f80a1a698a6b94566b9d3ff92410
SHA1

32eb585b7989eb10ca2527a0cca532dd1772e780
SHA256

bb96acf90ba3713f0a08c2dcf07a846edb88514ee228ed775a48ce5616c5be91
SHA512

0e100aedb363ee1e581c480189d3d4975e86a246eab227e2eaf2012d52ac3fc90637656ab3c717a59276d0b730c5614cb0534eb85809ca6309abe3bbe10b08c8
SSDEEP

768:phhKkUX+P2gi7YGGx4XiVeSYK2cfNXCY9D51eForaR9NFdoCil:jb1OtYGHXnYZbayatX4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bd0f80a1a698a6b94566b9d3ff92410_JaffaCakes118

Files

2bd0f80a1a698a6b94566b9d3ff92410_JaffaCakes118
.exe windows:5 windows x86 arch:x86

49fd739377fc40f3f8886c169876820b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
free
malloc
strspn
??2@YAPAXI@Z
_CxxThrowException
__CxxFrameHandler
??3@YAXPAX@Z

atl

ord16
ord21
ord18
ord22
ord23
ord15
ord30
ord32

winscard

SCardDisconnect
SCardReleaseContext
g_rgSCardT1Pci
g_rgSCardT0Pci
SCardEndTransaction
SCardReconnect
SCardBeginTransaction
SCardStatusA
SCardFreeMemory
SCardTransmit
SCardConnectA
SCardListCardsA
SCardListInterfacesA
SCardGetProviderIdA
SCardListReadersA
SCardListReaderGroupsA
SCardEstablishContext

scarddlg

ord1

ole32

CreateStreamOnHGlobal
CoCreateFreeThreadedMarshaler
HGLOBAL_UserSize
HGLOBAL_UserMarshal
HGLOBAL_UserUnmarshal
HGLOBAL_UserFree

oleaut32

LoadRegTypeLi
SetErrorInfo
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayGetDim
SafeArrayRedim
SafeArrayGetVartype
SafeArrayDestroy
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree

rpcrt4

NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

kernel32

lstrlenW
GetACP
EnterCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetLastError
GlobalLock
GlobalReAlloc
GlobalUnlock
InitializeCriticalSection
GlobalAlloc

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49fd739377fc40f3f8886c169876820b

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

atl

winscard

scarddlg

ole32

oleaut32

rpcrt4

advapi32

kernel32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 86KB - Virtual size: 86KB

.data Size: 84KB - Virtual size: 83KB

.xdata Size: 1024B - Virtual size: 636B

.bss Size: 84KB - Virtual size: 83KB

.pdata Size: 85KB - Virtual size: 85KB

.tls Size: 84KB - Virtual size: 83KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 512B - Virtual size: 444B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 86KB - Virtual size: 86KB

.data
Size: 84KB - Virtual size: 83KB

.xdata
Size: 1024B - Virtual size: 636B

.bss
Size: 84KB - Virtual size: 83KB

.pdata
Size: 85KB - Virtual size: 85KB

.tls
Size: 84KB - Virtual size: 83KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 512B - Virtual size: 444B