JaffaCakes118_48e398273f619a54502d4d3ca769db00

General

Target

JaffaCakes118_48e398273f619a54502d4d3ca769db00
Size

124KB
MD5

48e398273f619a54502d4d3ca769db00
SHA1

4ba4b532830aa552344b49e26dea4a004ff04f39
SHA256

60eb80c144a33cdd59965bcd833e47502547dea39c844ca12155f014d44d2b85
SHA512

5b917a714525025be96305286ee7d65d7bfa1cb70003835eed6c3b36ac9e9cb7615b4714285525c37555839c39eb04a6b19cdb84e40e45efbdf76c7a2cf8185b
SSDEEP

1536:yXCn/NcjojXkN+TI/CtlY84N+zeKYU/x7bqTl2J4LWh0WKMX2lmWVmjoiQI/Y:yXg/8obPntl1qohbqTlqG+OMmaBQIA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_48e398273f619a54502d4d3ca769db00

Files

JaffaCakes118_48e398273f619a54502d4d3ca769db00
.dll windows:4 windows x86 arch:x86

75d63ba44fe640edf9aa5fb8282337c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersionExA
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
DisableThreadLibraryCalls
WriteFile
SetFilePointer
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
MultiByteToWideChar
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
RtlUnwind
InterlockedExchange
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
ReadFile
HeapSize
GetLocaleInfoA
FlushFileBuffers
CloseHandle

Exports

Exports

?SUB_CallUseToggle@CBaseEntity@@QAEXXZ
AMXX_Attach
AMXX_Detach
AMXX_PluginsLoaded
AMXX_PluginsUnloaded
AMXX_PluginsUnloading
AMXX_Query
GetEngineFunctions
GetEngineFunctions_Post
GetEntityAPI2
GetEntityAPI2_Post
GetNewDLLFunctions
GetNewDLLFunctions_Post
GiveFnptrsToDll
Meta_Attach
Meta_Detach
Meta_Query

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

75d63ba44fe640edf9aa5fb8282337c2

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 3KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 3KB

.rmnet
Size: 60KB - Virtual size: 60KB