54af0ad710f9aa999dbc8d9586139894_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

54af0ad710f9aa999dbc8d9586139894_JaffaCakes118
Size

211KB
MD5

54af0ad710f9aa999dbc8d9586139894
SHA1

72f4f094c57420889e1ecc10c6eddd354b374037
SHA256

c323374cec2c005c4c55d43118a28c4ce881374efe4c24b2127ba97851e0b1d1
SHA512

3a8aa7d47670363aac3dd1c35006d46d1df68f28836df3d1bfa305a3c993b68599773665b34f7f1abf0465b9316bcf4f4fa406e91baf14c3842ec2dbf9a90c72
SSDEEP

3072:rD7Rw/x/sB2V4lHNNxAyskiid9nNrvLO+WaojDxIvZOl6KCYHuRGyBUoH:LRwCC4jaIRvK+Wa+xYsMKBy7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54af0ad710f9aa999dbc8d9586139894_JaffaCakes118

Files

54af0ad710f9aa999dbc8d9586139894_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8f51b4242d740a891e7f9a2256c72a90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStartupInfoA
GlobalLock
GlobalFree
lstrlenA
lstrcatA
lstrcpyA
GlobalAlloc
GlobalHandle
GlobalReAlloc
_lclose
_lread
_llseek
_hread
lstrcmpA
OpenFile
_lwrite
_hwrite
GetACP
GetOEMCP
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
SetHandleCount
GetFileType
GetStdHandle
GlobalUnlock
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
GetCPInfo
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
HeapFree
VirtualAlloc
FlushFileBuffers
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
SetFilePointer
SetStdHandle
CloseHandle
GetLocaleInfoA
GetLocaleInfoW

user32

MessageBoxA
wsprintfA

Exports

Exports

ClassFtr
EndPFtr
HLVQ_AddOutputNode
HLVQ_Backward
HLVQ_Forward
InitPFtr
NNBackward
NNCodeMapAddCode
NNCodeMapAddMap
NNComputeDistance
NNCreate
NNCreateCodeMap
NNCreateEngine
NNForward
NNFree
NNFreeCodeMap
NNFreeEngine
NNGetEngineAttribute
NNIndex2Code
NNReadCharImage
NNUpdate
PFtr
SOM_Backward
SOM_Forward
SOM_Winner

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f51b4242d740a891e7f9a2256c72a90

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 87KB - Virtual size: 86KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 13KB - Virtual size: 31KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 98KB - Virtual size: 98KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 87KB - Virtual size: 86KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 13KB - Virtual size: 31KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 98KB - Virtual size: 98KB

.reloc
Size: 6KB - Virtual size: 5KB