4bf758a65fe7dc8f879571f9bf5faf1b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

4bf758a65fe7dc8f879571f9bf5faf1b_JaffaCakes118
Size

201KB
MD5

4bf758a65fe7dc8f879571f9bf5faf1b
SHA1

dc8898166de5788b9573833378af95c774f66dc6
SHA256

60227c61219bfba2a397ff898e998e41bea302741edf2e6b68a5a389302c43ef
SHA512

60872aacc14b5ea6bbdcc10039e9b016aa82cedd844d7c39c61ec4e4c2d07e36dfb6b0ab9ea619da3ba0c4cc141adac62a85d83a46b44e68d942ba10774bb4d5
SSDEEP

6144:jXwU1iLEG7znkvOc009BbnUBah3nafO80Ha1:L1OEhOUBbn7Y1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf758a65fe7dc8f879571f9bf5faf1b_JaffaCakes118

Files

4bf758a65fe7dc8f879571f9bf5faf1b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bb547e2d6b5bf0544a7381258a9f4710

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
WritePrivateProfileStructA
GetNumberOfConsoleInputEvents
FindResourceExW
LoadLibraryExW
ReadConsoleA
InterlockedDecrement
CompareFileTime
GetUserDefaultLCID
InterlockedCompareExchange
OpenSemaphoreA
CallNamedPipeW
FreeEnvironmentStringsA
_lclose
SetTapeParameters
CreateNamedPipeW
GetSystemTimeAsFileTime
WriteFile
TlsSetValue
GlobalAlloc
Sleep
GetVersionExW
DeleteVolumeMountPointW
IsDBCSLeadByte
lstrcatA
SetThreadPriority
GlobalUnlock
DisconnectNamedPipe
DeactivateActCtx
CreateJobObjectA
GetLastError
GetProcAddress
BeginUpdateResourceW
SetVolumeLabelW
WriteProfileSectionA
IsValidCodePage
EnterCriticalSection
_hwrite
GetLocalTime
LoadLibraryA
WriteConsoleA
LocalAlloc
SetCurrentDirectoryW
SetFileApisToANSI
WaitForMultipleObjects
GetPrivateProfileSectionNamesA
GetOEMCP
EnumDateFormatsA
WaitCommEvent
GetModuleHandleA
GetCommTimeouts
RequestWakeupLatency
LocalSize
lstrcpyA
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
HeapSize
RtlUnwind
GetLocaleInfoA
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException

Exports

Exports

_geek@8
_gekelberifin@8

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb547e2d6b5bf0544a7381258a9f4710

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 171KB - Virtual size: 170KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 11.4MB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 171KB - Virtual size: 170KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 11.4MB

.rsrc
Size: 15KB - Virtual size: 15KB