fd66c51914ff72794af03688700bca49_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd66c51914ff72794af03688700bca49_JaffaCakes118
Size

167KB
MD5

fd66c51914ff72794af03688700bca49
SHA1

8ecb47120f6061e81f863522389250d07089ab4d
SHA256

c60ea6f6eb6edbc95e7efaab80ea6badaf419da16ff88b28234085aaef5a8237
SHA512

4b55f2e67e310066f9030a3ddb1f74fd49ed2a09ac1c3372b31e169643a3343e43dd466390cb8e725fd63d53e23c58251db138aa0ec6e4b19499123abe1147fe
SSDEEP

3072:0ZzK/h71VxCGwtItefYflsT/F7+BQVJO5Fc8CTuG+TK//:F5CfIgfr/NvCrWAK//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd66c51914ff72794af03688700bca49_JaffaCakes118

Files

fd66c51914ff72794af03688700bca49_JaffaCakes118
.exe windows:6 windows x86 arch:x86

0ae5a8f239eb5b825be82a398d6fe7c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptAcquireContextA
CryptImportKey
CryptReleaseContext
CryptDecrypt
CryptEncrypt
CryptDestroyKey
RegOpenKeyA
SystemFunction036

kernel32

GetProcAddress
VirtualAlloc
Sleep
CopyFileA
CreateDirectoryA
CreateProcessA
DeleteFileA
lstrcmpA
CreateFileA
LoadLibraryA
GetTempPathA
LocalAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
ReadFile
GetLastError
GetModuleFileNameW
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameA
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetFileType
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DecodePointer
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
CreateFileW

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ae5a8f239eb5b825be82a398d6fe7c2

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 74KB - Virtual size: 73KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 59KB - Virtual size: 61KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 74KB - Virtual size: 73KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 59KB - Virtual size: 61KB

.reloc
Size: 4KB - Virtual size: 4KB