5f93c6e584b5808b6ee206c017e0bf77_JaffaCakes118

General

Target

5f93c6e584b5808b6ee206c017e0bf77_JaffaCakes118
Size

231KB
MD5

5f93c6e584b5808b6ee206c017e0bf77
SHA1

73e3af7b719b9136972a6c3bf71f8a29509bce39
SHA256

66fc72efc0cc46051fa63498d6d911aaf5d5b44694ffec65ca02e5eb22fd90ec
SHA512

41b573032caba0f505a6094fa78e2adbf5f6465f0a70ec54d47d91f13fc1e6246909a113c521f999a94dbe0c3eaf0a323ce64f954d6223656f45c9bea26e8850
SSDEEP

3072:ijoTKu8czEwlDHEEghgq/51i6EfImpRup6wzo3WOX/2Nsliz1Gw8uzHpS5BSs6kV:o+TkZp1jQNw6wJBrrJS5Bv/+E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f93c6e584b5808b6ee206c017e0bf77_JaffaCakes118

Files

5f93c6e584b5808b6ee206c017e0bf77_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1341421c29550d5e00e8b694eb08f344

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

_encode_pointer
_decode_pointer
_encoded_null
__FrameUnwindFilter
_except_handler4_common
_crt_debugger_hook
asin
_cexit
_amsg_exit

kernel32

GetModuleHandleA
GetSystemTime
GetProcAddress
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileSize
SetEvent
GetTickCount
GlobalAlloc
GetFileAttributesA
IsProcessorFeaturePresent
FileTimeToSystemTime
ReadFile
Sleep

user32

LoadCursorW
GetClientRect
TranslateMessage
PeekMessageA
UpdateWindow
ShowWindow
LoadIconW

msimg32

TransparentBlt
AlphaBlend

msvcm90

?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 179KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1341421c29550d5e00e8b694eb08f344

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

kernel32

user32

msimg32

msvcm90

mscoree

Sections

.text Size: 23KB - Virtual size: 23KB

.data Size: 179KB - Virtual size: 237KB

.rsrc Size: 28KB - Virtual size: 27KB

.text
Size: 23KB - Virtual size: 23KB

.data
Size: 179KB - Virtual size: 237KB

.rsrc
Size: 28KB - Virtual size: 27KB