3e408d8e2f9c03a9b218656f63f654c0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3e408d8e2f9c03a9b218656f63f654c0_JaffaCakes118
Size

33KB
MD5

3e408d8e2f9c03a9b218656f63f654c0
SHA1

7f9c9d5f38c7e9f021992939e017d5c609eec8dc
SHA256

59913ce8b5a88f524f460ee340777829ff713e2a112ba7c05a336c7c7f3a29a8
SHA512

0018a9af18f5a9b4f24dbb9868ac2de4d5b925a1a347a050d2bd9eef948eedc62bb4a8fd83378249169045672568b091395f1fdbea35e6470ca89752d58feab0
SSDEEP

384:wNo0D009nkCAy99zIOeZsbpWm3cg+dJGXco7X2Tcep7gTVghoMu+9aNz6w9v:w/D009TW3GWmMg+WMAep7gJghJS1Dv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e408d8e2f9c03a9b218656f63f654c0_JaffaCakes118

Files

3e408d8e2f9c03a9b218656f63f654c0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7f799f3444184a9c5ed8afe5c194d3cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_onexit
__dllonexit
_vsnprintf
tolower
_except_handler3
malloc
exit
strrchr
strncpy
wcsstr
wcscpy
wcsncat
wcslen
time
srand
rand
strcmp
strcpy
free
strstr
__CxxFrameHandler
memcpy
mbstowcs
fopen
fseek
ftell
fclose
??2@YAPAXI@Z
wcscmp
??3@YAXPAX@Z
strlen
sprintf
memset
_strupr
_strcmpi

gdi32

GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDCA

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

kernel32

FlushInstructionCache
VirtualProtect
EnterCriticalSection
LeaveCriticalSection
IsBadReadPtr
InitializeCriticalSection
AddVectoredExceptionHandler
GetModuleHandleA
SetFilePointer
CreateFileA
Thread32Next
ReadFile
WideCharToMultiByte
VirtualQueryEx
ReadProcessMemory
GetFileAttributesW
GetTempPathA
DeleteFileA
GetCurrentProcessId
OpenProcess
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
SetThreadContext
GetThreadContext
OpenThread
Thread32First
GetFileSize
GetProcessHeap
Module32First
Module32Next
FreeLibrary
LoadLibraryA
GetProcAddress
HeapAlloc
CloseHandle
Sleep

user32

wsprintfA
GetWindow
GetClassNameW
GetDC
GetWindowRect

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shrwsds
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f799f3444184a9c5ed8afe5c194d3cf

Headers

File Characteristics

Imports

msvcrt

gdi32

msvcp60

kernel32

user32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 4B

shrwsds Size: 512B - Virtual size: 4B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 4B

shrwsds
Size: 512B - Virtual size: 4B

.reloc
Size: 2KB - Virtual size: 1KB