14c3f43d923ad6907815516e800853d9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

14c3f43d923ad6907815516e800853d9_JaffaCakes118
Size

60KB
MD5

14c3f43d923ad6907815516e800853d9
SHA1

b7a3bca738f924071ded9039f1271cfc82b759f7
SHA256

69f549e8ef3efc1e6a50f8d2b820a4198e85c37f91b78381bfcd16477780f6cb
SHA512

a5840512751df848ef15db55cf4208cfcd8937ae121e92c2e58b84d1854af9e7f3b488532dd544d60ad3fd73f73e12ee728001e21dd955b6de145d37b9521c34
SSDEEP

1536:bjwPXBrkpESDdXjdmrx/P2YHGcAy9NsM8tosRuF9F83QHeoOVzz:gXGWStErHGcNzscFv8311z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c3f43d923ad6907815516e800853d9_JaffaCakes118

Files

14c3f43d923ad6907815516e800853d9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

57b58ac8a2ff4d2f607f8e61dae0d56e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetCommandLineA
GetTickCount
LocalAlloc
LocalFree
lstrlenW
lstrcpyW
GetLocalTime
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection

msvcrt

_write
_sopen
_setmode
isspace
isdigit
isxdigit
_errno
strtoul
toupper
_close
_iob
fputc
fgetc
fread
fflush
malloc
__pioinfo
_lseek
memcpy
_XcptFilter
free
_initterm
_adjust_fdiv
_except_handler3
__CxxFrameHandler
??3@YAXPAX@Z
memmove

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57b58ac8a2ff4d2f607f8e61dae0d56e

Headers

File Characteristics

Imports

kernel32

msvcrt

msvcp60

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 34KB - Virtual size: 68KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 34KB - Virtual size: 68KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 1KB - Virtual size: 1KB