9c5806674011b297ac84f96f3a16f1e9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9c5806674011b297ac84f96f3a16f1e9_JaffaCakes118
Size

277KB
MD5

9c5806674011b297ac84f96f3a16f1e9
SHA1

6536fe0726720cb75c2848e3f3aa5cb5d33bc574
SHA256

aa05599c5095f883b88f8600a00d32efa7b7e64d10bfccb0d25300177f3bab26
SHA512

17f68127632db1c999a58fb3ca7f5b7a72fe06042979a921a0c8ac4621b3e4673801043e55d142a62f19ed8b73a80dd35c78a3680ef6de15df5fc4d3af7a68b5
SSDEEP

6144:PK+RLaDXoJ4dbhR9S4A02ZV2hBYHFyUNeBw:PKEkXPdbhPS4AyuN/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c5806674011b297ac84f96f3a16f1e9_JaffaCakes118

Files

9c5806674011b297ac84f96f3a16f1e9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3d81a545096ff200da20cd32dfd7d7cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GlobalAlloc
LoadLibraryW
TerminateThread
TerminateProcess
GetThreadPriorityBoost
GetFileSizeEx
GetStdHandle
GetLastError
GetProcAddress
LoadLibraryA
GetProcessId
TransmitCommChar
GetCommTimeouts
VirtualProtect
WriteConsoleOutputAttribute
GetCurrentProcess
CloseHandle
GetCurrentProcessId
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
LocalCompact
GetDriveTypeW
DuplicateHandle
GlobalMemoryStatus
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CreateFileA
SetStdHandle
FlushFileBuffers
HeapSize
GetLocaleInfoA
WriteConsoleA

user32

EndPaint
GetMessageW
LoadImageW
GetPropA
CharPrevExA
wsprintfA
DrawTextExW
SetPropW
GetScrollRange
PeekMessageA
ShowScrollBar
DestroyIcon

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.version
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.version
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d81a545096ff200da20cd32dfd7d7cd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 98KB - Virtual size: 97KB

.data Size: 7KB - Virtual size: 375KB

.version Size: 1024B - Virtual size: 1024B

.version Size: 1024B - Virtual size: 4KB

.rsrc Size: 114KB - Virtual size: 114KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 98KB - Virtual size: 97KB

.data
Size: 7KB - Virtual size: 375KB

.version
Size: 1024B - Virtual size: 1024B

.version
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 114KB - Virtual size: 114KB

.reloc
Size: 8KB - Virtual size: 7KB