3a19a68c2c49f132ca53f5d1b3694f4d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3a19a68c2c49f132ca53f5d1b3694f4d_JaffaCakes118
Size

490KB
MD5

3a19a68c2c49f132ca53f5d1b3694f4d
SHA1

11eddbbf6bdc9b76adb96b832718e26f8bd78bbe
SHA256

3cafb2948f1be6c10b608edd8c47c12fa23aca450fa12333da8b83d6fa61aed9
SHA512

44959c2cfaf0acd2ab855ac690db12c5a9d640d02ed9cacc478c249e81dac1a001d93a75b4c7b623393bb10ab8a64d79c6fe4a9ebb317c8a410597da00a85db7
SSDEEP

6144:bKxlDe5bbG3Js+GytVnWCD5KCD/AKCD/MDI:2lD8bKs+vtV5FKCDAKCDsI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a19a68c2c49f132ca53f5d1b3694f4d_JaffaCakes118

Files

3a19a68c2c49f132ca53f5d1b3694f4d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ed10e75e4589cd193e0d123f7e70942b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Studio\ycs-works\cef_binary_3.2623.1395.g3034273_windows32\Release\Ayana.pdb

Imports

libcef

cef_string_list_copy
cef_string_multimap_free
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_utf16_cmp
cef_string_map_free
cef_string_map_alloc
cef_browser_host_create_browser
cef_api_hash
cef_quit_message_loop
cef_run_message_loop
cef_shutdown
cef_initialize
cef_execute_process
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_string_utf16_set
cef_string_utf8_to_utf16
cef_string_utf16_clear

kernel32

CloseHandle
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
LoadLibraryExW
HeapReAlloc
GetOEMCP
GetACP
IsValidCodePage
HeapSize
IsDebuggerPresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetProcessHeap
GetModuleHandleExW
ExitProcess
GetCurrentThreadId
LCMapStringW
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
GetCPInfo
RtlUnwind
RaiseException
HeapFree
GetLastError
GetCommandLineW
GetStringTypeW
MultiByteToWideChar
DecodePointer
EncodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte

Sections

.text
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed10e75e4589cd193e0d123f7e70942b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libcef

kernel32

Sections

.text Size: 182KB - Virtual size: 181KB

.rdata Size: 69KB - Virtual size: 69KB

.data Size: 19KB - Virtual size: 28KB

.rsrc Size: 197KB - Virtual size: 197KB

.reloc Size: 20KB - Virtual size: 20KB

.text
Size: 182KB - Virtual size: 181KB

.rdata
Size: 69KB - Virtual size: 69KB

.data
Size: 19KB - Virtual size: 28KB

.rsrc
Size: 197KB - Virtual size: 197KB

.reloc
Size: 20KB - Virtual size: 20KB