28c49eb4f2dfa09ab41ec5ba7fe96eaf_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

28c49eb4f2dfa09ab41ec5ba7fe96eaf_JaffaCakes118
Size

539KB
MD5

28c49eb4f2dfa09ab41ec5ba7fe96eaf
SHA1

e28d4cb57b9836d29e324d9e51692b84a50a3ca5
SHA256

eb3e91eb6062ab5dc2682efa3d6485e13745426d5c43c0f8c5da34d85419f3bb
SHA512

8d95224a8561d0f5ff4f270447b1c392dd41ee5833dbafdf37b3e8412e3bf7c61bc74c01a789dd92cf7173995698a7cf3ad1a643f8fd2dc4a99d9a4944b30c2f
SSDEEP

12288:vdnBNl0RtTNxfSiCjtFYS9ief6JsYVtajaxIABxnjG8oi8WrT:T0rTNpSJtFTNYV4jZABlG8h1/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
28c49eb4f2dfa09ab41ec5ba7fe96eaf_JaffaCakes118

Files

28c49eb4f2dfa09ab41ec5ba7fe96eaf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7dcb67d53f6d18c285f0b020208081b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetUserDefaultLangID
CreateWaitableTimerA
GetSystemTimeAdjustment
DeviceIoControl
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetLastError
GetModuleFileNameW
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
LocalUnlock
GetACP
HeapFree
HeapAlloc
LCMapStringW
GetFileType
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
DecodePointer
SetFilePointerEx
WriteConsoleW
CreateFileW
GetModuleHandleExW
LocalAlloc

comdlg32

CommDlgExtendedError

advapi32

SystemFunction036

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.test
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dcb67d53f6d18c285f0b020208081b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

advapi32

Sections

.text Size: 94KB - Virtual size: 93KB

.data Size: 2KB - Virtual size: 5KB

.gfids Size: 512B - Virtual size: 180B

.test Size: 28KB - Virtual size: 27KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 94KB - Virtual size: 93KB

.data
Size: 2KB - Virtual size: 5KB

.gfids
Size: 512B - Virtual size: 180B

.test
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB