3fcbc0d16506ae06f0b66cabb975b036_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3fcbc0d16506ae06f0b66cabb975b036_JaffaCakes118
Size

982KB
MD5

3fcbc0d16506ae06f0b66cabb975b036
SHA1

c947b337bf42fd1bc9b039385e3b36bd3952d0ba
SHA256

1c382422aaa7ec5d2d81bf7913aec3dc3eeb943230a57d30265e2206b96e98c4
SHA512

29a6ee76d67fba6ae38dc484d39e43c919a91fdb2791c4f6f2c2d1adae1fae720306dc7cc1ba59649102894fdf029f9054f420f23437918098af952004013f47
SSDEEP

12288:9iuPu7vD1IbgV588J52Q4rflYY7ClwrkTLt0t/4YaHtZbcsQarqO57LOyr80aIwj:jW7TP6QZYOfTh+/4YMXQauO5Oyr7FMh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fcbc0d16506ae06f0b66cabb975b036_JaffaCakes118

Files

3fcbc0d16506ae06f0b66cabb975b036_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Exports

Exports

PSA_CheckProtectedModulesReadOnlyMem
PSA_CheckProtectedModulesReadOnlyMemEx
PSA_DummyFunction
PSA_GetCheckFilesHashResult
PSA_Uninitialize
PSC_FinishInitializationFailure
PSC_FinishInitializationSuccess
PSC_GetErrorInformation
PSC_LoadString
PSC_PerformInitializationAtValidLicense
PSC_StartInitialization
PSC_Uninitialize
PSE_ActivateAutomatically
PSE_CollectSystemInformation
PSE_DisplayExceptionMessage
PSE_GetCurrentLanguage
PSE_GetHostProcessId
PSE_GetInteger
PSE_GetNativeOsVersion
PSE_GetOverlay2
PSE_GetString
PSE_GetUserInterfaceModulePathName
PSE_IsActivatorMode
PSE_IsActivatorModeForApplicationLaunchingViaHelper
PSE_IsApplicationLaunchingMode
PSE_IsElmApplication
PSE_IsElmLoader
PSE_IsGuiAvailable
PSE_IsPathDefined
PSE_IsReadOnlyAccessToLicenses
PSE_IsTransceiverValid
PSE_LoadString
PSE_LogErrorEvent
PSE_LogInformationEvent
PSE_LogWarningEvent
PSE_MemoryAlloc
PSE_MemoryFree
PSE_NoGuiReportError
PSE_ReadInteger
PSE_ReadLastNagScreenTime
PSE_ReadString
PSE_RunHelper
PSE_SetCurrentLanguage
PSE_SetInteger
PSE_SetString
PSE_ThrowStringException
PSE_WriteInteger
PSE_WriteLastNagScreenTime
PSE_WriteRegFile
PSE_WriteString
ProtectSdkVersion

Sections

.text
Size: 357KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 357KB - Virtual size: 356KB

.rdata Size: 201KB - Virtual size: 201KB

.data Size: 11KB - Virtual size: 39KB

.rsrc Size: 77KB - Virtual size: 77KB

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 357KB - Virtual size: 356KB

.rdata
Size: 201KB - Virtual size: 201KB

.data
Size: 11KB - Virtual size: 39KB

.rsrc
Size: 77KB - Virtual size: 77KB

.reloc
Size: 29KB - Virtual size: 28KB