551dd04349ce7e48f1d9601cdfe24804_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

551dd04349ce7e48f1d9601cdfe24804_JaffaCakes118
Size

69KB
MD5

551dd04349ce7e48f1d9601cdfe24804
SHA1

52c3c59ee4315d50897689b7583c17ea4b097559
SHA256

ad2c0b62e8702aec71d2f74e9722832c62bd73a41485d1eb2ddd50a5d08fbd6d
SHA512

24746924ffdabc37cd0ced5ba378c457430f568f78f30051b0f81d98e26a508815c79cf25d36f0be4a668e3a801431138d9b598b5f42dd6f334e90a79f1a4f9b
SSDEEP

1536:B3Qg3uw4bTKnuA9ZSgjTIyq5lb6d5pm03Uyk5BjRXNqnP:BReTenuqSgj03lmpdJaBjRXkn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
551dd04349ce7e48f1d9601cdfe24804_JaffaCakes118

Files

551dd04349ce7e48f1d9601cdfe24804_JaffaCakes118
.dll windows:4 windows x86 arch:x86

20c3c286793136ada13b65a2b8a8062a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLocaleInfoW
GetFileSize
WideCharToMultiByte
CreateFileA
CloseHandle
CompareStringA
GetCurrentThreadId
TlsSetValue
LeaveCriticalSection
GetVersionExW
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
TlsGetValue
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
GetLastError
HeapAlloc
UnmapViewOfFile
SearchPathW
LocalFree
LocalAlloc
SetEvent
WaitForSingleObject
VirtualAlloc
ResetEvent
DisableThreadLibraryCalls
CreateFileW
FindResourceExW
SetLastError
LoadLibraryExW
VirtualProtect
MapViewOfFile
CreateFileMappingW
EnterCriticalSection

advapi32

RegDeleteKeyA
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

ole32

CoGetClassObject
CoGetMalloc
CreateBindCtx
CoTaskMemFree

rpcrt4

NdrClientCall2
RpcSsDestroyClientContext

msvcrt

_onexit
malloc
_adjust_fdiv
__dllonexit
bsearch
_wcsnicmp
_vsnwprintf
_XcptFilter
free
_initterm
memcpy
memmove
memset
_except_handler3
time
__CxxFrameHandler
??3@YAXPAX@Z
wcslen

msvcp60

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20c3c286793136ada13b65a2b8a8062a

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

rpcrt4

msvcrt

msvcp60

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 37KB - Virtual size: 37KB

.data Size: 1024B - Virtual size: 34KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 1024B - Virtual size: 34KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB