161bc57e66ae55ffa2924e3cd7056c08_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

161bc57e66ae55ffa2924e3cd7056c08_JaffaCakes118
Size

718KB
MD5

161bc57e66ae55ffa2924e3cd7056c08
SHA1

0d36109e4663ebd599902310786cb32c308808be
SHA256

8590f034df4fae88a5535b065e7614c085c0195d2f8408da54721410d39b1840
SHA512

6e33c00bbf51039bd4c06483f990d60a7449cdfb2bc384a580210bb6f3a85f7090b4ce2720d7381ce1b0597f6a5423a5685521374e459ad408362bfcc9c9fe2b
SSDEEP

12288:9n8YXXRLBQpoOHJ0X3zhgrTkFgvxAzEfn0R8VxjqYpXV3Qs5H6d:98YXBNuoOpSjyr5vxAadfjqYpF3Qs5g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
161bc57e66ae55ffa2924e3cd7056c08_JaffaCakes118

Files

161bc57e66ae55ffa2924e3cd7056c08_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8ae31bfb799aac364d29dc5426f037bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
OpenFile
InterlockedIncrement
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentThread
CreateProcessA
VirtualAlloc
GetCurrentProcessId
GetSystemTime
SetUnhandledExceptionFilter
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind

user32

FindWindowW
IsCharLowerA
IsCharAlphaW
DestroyWindow
CharLowerA
GetAncestor
IsCharLowerW
DeregisterShellHookWindow
GetShellWindow
FindWindowA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.r8ata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.civ
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.re50c
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ae31bfb799aac364d29dc5426f037bf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 4KB - Virtual size: 3KB

.r8ata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1KB

.00 Size: 512B - Virtual size: 140B

.tls Size: 2KB - Virtual size: 2KB

.civ Size: 512B - Virtual size: 288B

.CRT Size: 512B - Virtual size: 12B

.re50c Size: 512B - Virtual size: 382B

.rsrc Size: 1.8MB - Virtual size: 3.4MB

.text
Size: 4KB - Virtual size: 3KB

.r8ata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.00
Size: 512B - Virtual size: 140B

.tls
Size: 2KB - Virtual size: 2KB

.civ
Size: 512B - Virtual size: 288B

.CRT
Size: 512B - Virtual size: 12B

.re50c
Size: 512B - Virtual size: 382B

.rsrc
Size: 1.8MB - Virtual size: 3.4MB