826e27ebe4950a57b944757673b9a93a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

826e27ebe4950a57b944757673b9a93a_JaffaCakes118
Size

481KB
MD5

826e27ebe4950a57b944757673b9a93a
SHA1

2fb95c18197d28fa2f06256320db4b277e126671
SHA256

c45c6faa94764a703ef64098046ffbb24eebd81bc360f31f441b884a8cddae5f
SHA512

07a6634a640336eee87b9592d5bc3255ab806c46a47c7155c75f0689a2c32184e74ea177741e5af2335f5e08fe8568eac2dcd0c8397d34302085c21f9d832b0a
SSDEEP

6144:5V6cQ5JWuSGbFMmNMiYrA9JnAURrQS4e25BbUV7TXSwtiYRhicrBn25ywXCu16AB:5VGJHd5MKbfrme25BAvsYOJywyu8wXQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
826e27ebe4950a57b944757673b9a93a_JaffaCakes118

Files

826e27ebe4950a57b944757673b9a93a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

c8043e6c49fd266fe13abb78b85e530c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\ice\949-major\429\Dog\end\Table.pdb

Imports

kernel32

Sleep
GetModuleFileNameW
GetCurrentDirectoryW
GetProcAddress
VirtualProtectEx
RemoveDirectoryW
GetCurrentThreadId
GetWindowsDirectoryW
SetFileAttributesW
LoadLibraryW
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapSize
CloseHandle
GetSystemDirectoryW
GetTickCount
CreateProcessW
FreeLibrary
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleA

user32

GetWindowThreadProcessId
SetWindowsHookExW
FrameRect
GetSysColorBrush
CreatePopupMenu
SystemParametersInfoW
CreateDialogIndirectParamW
ClientToScreen
GetWindowTextLengthW
GetWindowRect
DialogBoxIndirectParamW
GetClientRect
GetForegroundWindow
RegisterClassExW

gdi32

LineTo
SetBkMode
IntersectClipRect
MoveToEx

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

winmm

timeBeginPeriod
PlaySoundA
timeEndPeriod

Exports

Exports

Basic
Nevercorner
Sawmatter

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 281KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8043e6c49fd266fe13abb78b85e530c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

version

winmm

Exports

Exports

Sections

.text Size: 182KB - Virtual size: 182KB

.rdata Size: 281KB - Virtual size: 280KB

.data Size: 6KB - Virtual size: 86KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 182KB - Virtual size: 182KB

.rdata
Size: 281KB - Virtual size: 280KB

.data
Size: 6KB - Virtual size: 86KB

.reloc
Size: 10KB - Virtual size: 10KB