30ec378ce4ec5c44be3e52ceafd38af0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

30ec378ce4ec5c44be3e52ceafd38af0_JaffaCakes118
Size

420KB
MD5

30ec378ce4ec5c44be3e52ceafd38af0
SHA1

d3c89f7392c764f6e6936bf280c97eb8dd6596c3
SHA256

a10324e682b873803db1abd1f3fd4e5cac8b596105d8d0b2bfe3b02435ea2fd1
SHA512

86177ca35d053526bc36f746f60d1f6b3fc2a7564df83a1d007dfc84dcf5385c6a49d5120d54b20816f375c010b03b3a22131100ed72fbab326269f440465251
SSDEEP

6144:zvYgsnalKbePJ73SD5M44qCFKapXQ3OIHeXJ0lQ1VCsPEfHizCTQiZDamzYODpPB:zvYdalKihiyquKQXJ9HPEKzCnZvVzag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30ec378ce4ec5c44be3e52ceafd38af0_JaffaCakes118

Files

30ec378ce4ec5c44be3e52ceafd38af0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9e7e4dbfd85c919e29580d909a107c54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??2@YAPAXI@Z
__CxxFrameHandler
atol
_ftol
toupper
_purecall
sprintf
strstr
atoi
strchr
_wtoi
printf
isdigit
_vsnprintf
fclose
fread
_strcmpi
_adjust_fdiv
??3@YAXPAX@Z
_initterm
_onexit
__dllonexit
rand
memmove
_open
_read
_close
_write
_putenv
_itoa
_strnicmp
_ismbcspace
realloc
_stricmp
free
malloc
_mbctype
strrchr
wcslen
_getcwd
_chdir
mbstowcs
wcscpy
wcstombs
_swab
strncpy
strncmp
fseek
ftell
fopen
_except_handler3

ole32

CoFreeUnusedLibraries
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitialize

advapi32

RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

user32

CharPrevA
CharNextA
LoadCursorA
SetCursor
wvsprintfA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetWindowLongA
DefWindowProcA
KillTimer
SetTimer
IsWindow
DestroyWindow
UnregisterClassA
RegisterClassA
CreateWindowExA
SetWindowLongA
FindWindowExA
SetFocus
PostMessageA
MessageBoxA
GetSystemMetrics

winmm

mmioGetInfo
mmioDescend
mmioOpenA
mmioClose

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

FindFirstFileA
LeaveCriticalSection
FindClose
GetLastError
DisableThreadLibraryCalls
GetModuleFileNameA
GetCurrentThreadId
lstrlenA
GetVersionExA
SetErrorMode
GetFileAttributesExA
GetLocaleInfoA
DeviceIoControl
CloseHandle
CreateFileA
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
MultiByteToWideChar
LoadLibraryA
GetModuleHandleA
FreeLibrary
InterlockedIncrement
GetProcAddress
InterlockedDecrement
lstrcatA
GetDriveTypeA
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateEventA
ResetEvent
SetEvent
WaitForMultipleObjects
CreateSemaphoreA
ReleaseSemaphore
GetSystemInfo
VirtualAlloc
VirtualFree
lstrcpyA
WideCharToMultiByte
GetACP
CreateThread
SetThreadPriority
MulDiv
PulseEvent
GetVersion
ReadFile
SetFilePointer
lstrcpynA
GetLogicalDriveStringsA
OutputDebugStringA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e7e4dbfd85c919e29580d909a107c54

Headers

File Characteristics

Imports

pncrt

ole32

advapi32

user32

winmm

version

kernel32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 181KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 28KB - Virtual size: 29KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 20KB - Virtual size: 18KB

.text
Size: 184KB - Virtual size: 181KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 28KB - Virtual size: 29KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 20KB - Virtual size: 18KB