09a12ba9838cc123916f2d501d717d87_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

09a12ba9838cc123916f2d501d717d87_JaffaCakes118
Size

1.4MB
MD5

09a12ba9838cc123916f2d501d717d87
SHA1

8395481b3538b843d45b46de9fb3a47e4b2deb58
SHA256

176821d60f9a6669edb48268a9ee1f66ec4abb649c253bf2371cc3688d9c03ea
SHA512

186a5054b1ecd63d52df048473ddef0653c9e5da575af63d7588ece3fa330aba2a893a76b0a073dbb4688ba70fed7e93ae258d5402fc4820c9561039d23f9b2f
SSDEEP

24576:BIJVt+56JOLSqZ5nF+Ej8Cj4S5yBZ8pVfuTJOLS7Z5nFDkn8Fo14nC+hdv:yfRULBZp8EgCj4yyBi/iULAZpxk8Q4Cs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09a12ba9838cc123916f2d501d717d87_JaffaCakes118

Files

09a12ba9838cc123916f2d501d717d87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetSpecifiedAttributeCount
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserCreate_MM
XML_ParserFree
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_UseParserAsHandlerArg

Sections

.text
Size: 928KB - Virtual size: 928KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.neolit
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PTData
Size: 744KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 928KB - Virtual size: 928KB

.rdata Size: 236KB - Virtual size: 236KB

.data Size: 4KB - Virtual size: 74KB

.rsrc Size: 16KB - Virtual size: 387KB

.neolit Size: 8KB - Virtual size: 26KB

.PTData Size: 744KB - Virtual size: 744KB

.text
Size: 928KB - Virtual size: 928KB

.rdata
Size: 236KB - Virtual size: 236KB

.data
Size: 4KB - Virtual size: 74KB

.rsrc
Size: 16KB - Virtual size: 387KB

.neolit
Size: 8KB - Virtual size: 26KB

.PTData
Size: 744KB - Virtual size: 744KB