724ff87c62995e1c339587769fbc1c25_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

724ff87c62995e1c339587769fbc1c25_JaffaCakes118
Size

961KB
MD5

724ff87c62995e1c339587769fbc1c25
SHA1

350c31c6f8935036bd45fed03cff65f406a76e46
SHA256

86bce72d61b4e3c464c237b81cec400b4d974baf2c963a19bce5161266eb9f0f
SHA512

e7f669ed243c833f81031413a85481b973897fe02de86dae835fb7c25c728d1d07c76308f3ef693bf55fd319d4e3fe0b89b11e30278e2c5b32470e2d66e8fd5d
SSDEEP

6144:UatvfcwQyuo90W/IpXbfwWknPxlHiFkOPu1t6sVdR54G3/Ts5j6a4XaTBwOqsqY4:9v5QW9X/IczHiFkOPyUMVvTsgaTLFAFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
724ff87c62995e1c339587769fbc1c25_JaffaCakes118

Files

724ff87c62995e1c339587769fbc1c25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Exports

Exports

PSA_CheckFeaturesGrantedByLicense
PSA_DisableFeaturesGrantedByLicense
PSA_DummyFunction
PSA_GetFeaturesGrantedByLicense
PSA_GetLicenseConfirmationTime
PSA_GetLicenseConfirmationTimeLimit
PSA_GetLicenseCreationDateTime
PSA_GetLicenseExecutionTimeLimit
PSA_GetLicenseExpirationDateTime
PSA_GetLicenseInformation
PSA_GetLicenseLifeTimeLimit
PSA_GetLicenseNumberOfRunsLimit
PSA_GetLicenseStartDateTime
PSA_GetLicenseStoragePath
PSA_GetNumberOfConnections
PSA_GetRemainingExecutionTime
PSA_GetRemainingExecutionTimeAtStart
PSA_GetRemainingNumberOfRuns
PSA_GetTimeRemainingToLicenseConfirmation
PSA_GetTimeToLicenseExpiration
PSA_GetUserDefinedField16Bits
PSA_IsDemoMode
PSA_IsLicenseActivatedAsTrial
PSA_IsLicenseExpired
PSA_IsLicenseNeedConfirmation
PSA_IsTrialMode
PSA_Uninitialize
PSC_ActivateAutomatically
PSC_EnterGlobalCriticalSection
PSC_FinishInitializationFailure
PSC_FinishInitializationSuccess
PSC_GetErrorInformation
PSC_GetLicenseId
PSC_HardwareActivateAndStoreNormalLicense
PSC_HardwareCreateOrLoadNormalLicenseAndGetHardwareCode
PSC_HardwareTryNormalLicense
PSC_InitializeDemoMode
PSC_LeaveGlobalCriticalSection
PSC_LoadString
PSC_PerformInitializationAtValidLicense
PSC_StartInitialization
PSC_Uninitialize
PSC_ValidateLicenseNumber
PSE_ActivateAutomatically
PSE_CollectSystemInformation
PSE_DisplayExceptionMessage
PSE_GetCurrentLanguage
PSE_GetHostProcessId
PSE_GetInteger
PSE_GetListOfLicenseNumbers
PSE_GetNativeOsVersion
PSE_GetOverlay2
PSE_GetString
PSE_GetUserInterfaceModulePathName
PSE_IsActivatorMode
PSE_IsActivatorModeForApplicationLaunchingViaHelper
PSE_IsApplicationLaunchingMode
PSE_IsElmApplication
PSE_IsElmLoader
PSE_IsGuiAvailable
PSE_IsPathDefined
PSE_IsReadOnlyAccessToLicenses
PSE_IsTransceiverValid
PSE_LoadString
PSE_LogErrorEvent
PSE_LogInformationEvent
PSE_LogWarningEvent
PSE_MemoryAlloc
PSE_MemoryFree
PSE_NoGuiReportError
PSE_ReadInteger
PSE_ReadLastNagScreenTime
PSE_ReadString
PSE_RunHelper
PSE_SetCurrentLanguage
PSE_SetInteger
PSE_SetString
PSE_ThrowStringException
PSE_WriteInteger
PSE_WriteLastNagScreenTime
PSE_WriteRegFile
PSE_WriteString
ProtectSdkVersion

Sections

.text
Size: 468KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 468KB - Virtual size: 465KB

.rdata Size: 244KB - Virtual size: 243KB

.data Size: 20KB - Virtual size: 50KB

.rsrc Size: 80KB - Virtual size: 77KB

.reloc Size: 76KB - Virtual size: 74KB

.text
Size: 468KB - Virtual size: 465KB

.rdata
Size: 244KB - Virtual size: 243KB

.data
Size: 20KB - Virtual size: 50KB

.rsrc
Size: 80KB - Virtual size: 77KB

.reloc
Size: 76KB - Virtual size: 74KB