92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118
Size

90KB
MD5

92dbe3d237c0b38a6feaece08bf7a1f6
SHA1

5eeda1c31858de743f8afa7ce6c24c8c0e816c7d
SHA256

67713ae5aac48a69c97bcb8dbc6db59518a3b7c60ce57ab48c1883bd995bf7d4
SHA512

fe5f35f485dc2a675374c2581ea8a0bb92f88ef43d225e0f53d57bed6587fd73a8554cd946af252f1557e3e8573c00c43929c31e9e32258aae2b49e538c6494d
SSDEEP

1536:YyXUR8CPCrDfDpmk5C7hWmMv1CoAuBFYDlXq6RTm:5XUta7ptgC1CCE66R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118

Files

92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

395301b22ee9f744df4d1b3eb5c7e899

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
FileTimeToDosDateTime
lstrlenA
WritePrivateProfileStructA
FindResourceExW
CallNamedPipeA
LoadLibraryExW
ReadConsoleA
InterlockedDecrement
ScrollConsoleScreenBufferW
GetUserDefaultLCID
InterlockedCompareExchange
FreeEnvironmentStringsA
_lclose
SetTapeParameters
GetSystemTimeAsFileTime
WriteFile
TlsSetValue
GlobalAlloc
LoadLibraryW
Sleep
GetVersionExW
DeleteVolumeMountPointW
LeaveCriticalSection
SetConsoleMode
WriteConsoleW
lstrcatA
DisconnectNamedPipe
ReleaseActCtx
SetCurrentDirectoryA
GetLastError
IsDBCSLeadByteEx
GetProcAddress
BeginUpdateResourceW
CreateNamedPipeA
SetVolumeLabelW
WriteProfileSectionA
IsValidCodePage
_hwrite
GetLocalTime
LoadLibraryA
LocalAlloc
IsSystemResumeAutomatic
WaitForMultipleObjects
GetPrivateProfileSectionNamesA
GetOEMCP
GetThreadPriority
WaitCommEvent
GetCommTimeouts
EnumDateFormatsW
OpenSemaphoreW
AreFileApisANSI
lstrcpyA
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
HeapSize
RtlUnwind
GetLocaleInfoA
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleA
RaiseException

Exports

Exports

_geek@8
_gekelberifin@8

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

395301b22ee9f744df4d1b3eb5c7e899

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 11.4MB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 11.4MB

.rsrc
Size: 11KB - Virtual size: 10KB