23f48a81190ed49b1faea0f7019ad6fc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

23f48a81190ed49b1faea0f7019ad6fc_JaffaCakes118
Size

940KB
MD5

23f48a81190ed49b1faea0f7019ad6fc
SHA1

c3316a6f9af4e824d47da1144cba45eb22c2a241
SHA256

25ae21623bc8f9b7788ac0cad7ff89dea59435e7819144173a61a0561897e42b
SHA512

502517dcffccfc607775084bf7708234c0c4a9c84bc927c25243b0642a77d84bc174d9c5944e8d182ffa667ed099af4d647063e1019c2c34233fb7049db8bae9
SSDEEP

6144:WC24BtEHdrOJEYtiLAUj4g30mL+O7my3rvE5Dii9QLilaRHS1Ve/uUXN6BPFGylF:WpCIHDqDHtiutt8KVsZ8eqlii

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23f48a81190ed49b1faea0f7019ad6fc_JaffaCakes118

Files

23f48a81190ed49b1faea0f7019ad6fc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4bf5b86e0bc787813c3b63c8e1ef09ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dipemokilol.pdb

Imports

kernel32

GetLastError
EnterCriticalSection
GetFileType
GetFileSize
GetCurrentProcess
DisconnectNamedPipe
GetSystemWindowsDirectoryW
GetACP
EnumDateFormatsW
AddConsoleAliasA
VirtualQuery
VirtualProtect
SetFileTime
GlobalAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetLastError
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
HeapFree
HeapAlloc
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
CloseHandle
SetStdHandle
GetStringTypeW
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

advapi32

EnumDependentServicesW
RegDeleteValueW
RegisterServiceCtrlHandlerA

Exports

Exports

_ExportFuncs@4

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wuzu
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 845KB - Virtual size: 845KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 49.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dulehap
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4bf5b86e0bc787813c3b63c8e1ef09ed

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 42KB

.wuzu Size: 512B - Virtual size: 310B

.rdata Size: 845KB - Virtual size: 845KB

.data Size: 9KB - Virtual size: 49.3MB

.dulehap Size: 1KB - Virtual size: 5KB

.gfids Size: 512B - Virtual size: 172B

.rsrc Size: 35KB - Virtual size: 34KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 42KB - Virtual size: 42KB

.wuzu
Size: 512B - Virtual size: 310B

.rdata
Size: 845KB - Virtual size: 845KB

.data
Size: 9KB - Virtual size: 49.3MB

.dulehap
Size: 1KB - Virtual size: 5KB

.gfids
Size: 512B - Virtual size: 172B

.rsrc
Size: 35KB - Virtual size: 34KB

.reloc
Size: 4KB - Virtual size: 3KB