3cf2dcbe75be41c8b2470cc2e277759e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3cf2dcbe75be41c8b2470cc2e277759e_JaffaCakes118
Size

73KB
MD5

3cf2dcbe75be41c8b2470cc2e277759e
SHA1

acf01898f79b7e9f81148e1fa3e239cbf3ffc269
SHA256

33e2e20dec5c8e7e20eb945c84d70a8de75d2bcbe8abd49b2058132fd43ca13d
SHA512

65d556440382653cf3538772f1f4b78a881b52ad5af3be03bfbf314495b80ac087bfb358a2b72593ea1c407af3db2930a78116fe8505006357da21fe9bbaebe2
SSDEEP

1536:7sh3XVk9j8TShVkzFoMhwknerBbigy9fyFY6rMa3gu8pAZ:y3Fk9j8GVi+kLn+BeRfyFus8pQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cf2dcbe75be41c8b2470cc2e277759e_JaffaCakes118

Files

3cf2dcbe75be41c8b2470cc2e277759e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7308ecd14e3ef9042ba895806e9fb55c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetVersion
GlobalAlloc
GlobalFree

msvcrt40

_initterm
malloc
free
_strnicmp
_except_handler3
sprintf
_adjust_fdiv
_stricmp
memcpy
strcat
strcpy
strncpy
memset
strlen
strchr

rpcrt4

NdrGetBuffer
RpcBindingFromStringBindingA
NdrSendReceive
NdrClientContextUnmarshall
NdrConvert
NDRCContextBinding
NdrConformantArrayMarshall
NdrConformantArrayBufferSize
RpcBindingSetAuthInfoA
NdrClientInitializeNew
NdrConformantVaryingArrayUnmarshall
NdrClientContextMarshall
RpcBindingFree
RpcNetworkIsProtseqValidA
NdrFreeBuffer
RpcEpResolveBinding

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

ConnectionCheckForData
ConnectionClose
ConnectionError
ConnectionMode
ConnectionObjectSize
ConnectionOpen
ConnectionRead
ConnectionServerEnum
ConnectionStatus
ConnectionTransact
ConnectionVer
ConnectionWrite
ConnectionWriteOOB

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7308ecd14e3ef9042ba895806e9fb55c

Headers

File Characteristics

Imports

kernel32

msvcrt40

rpcrt4

advapi32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 1024B - Virtual size: 1002B

.data Size: 512B - Virtual size: 432B

.idata Size: 61KB - Virtual size: 61KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 554B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 1024B - Virtual size: 1002B

.data
Size: 512B - Virtual size: 432B

.idata
Size: 61KB - Virtual size: 61KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 554B