294e1a8cc307cccee594e836d66cb8ce_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

294e1a8cc307cccee594e836d66cb8ce_JaffaCakes118
Size

324KB
MD5

294e1a8cc307cccee594e836d66cb8ce
SHA1

91814be403433affb5bcf4630282c3908afcfca7
SHA256

f574c920aa16b555e0b81abb37c21549a382c1c7345e225a76ba2c69c1df2018
SHA512

4d51b796611b09b3db03638183b7cef1263ba4b1880330796a6e7345146d41bcf94523865a60f9ebee7b6fc622fd50551dc42d8b713eff98eb22e01d4e7e919d
SSDEEP

6144:LBTfMvlVWk2VrJ1oYp9uQW0X/el8mIGFwjkGascQngKNt7GQmI:LB7MvlVWkQ91o6uQW0XlmZpG3vNtvm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
294e1a8cc307cccee594e836d66cb8ce_JaffaCakes118

Files

294e1a8cc307cccee594e836d66cb8ce_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7babdc1d7d6c2cf7b88e3a3785ced56f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcsncpy
malloc
wcslen
_except_handler3
free
wcscpy
wcsncat
_adjust_fdiv
_initterm
_purecall
__CxxFrameHandler
realloc

oleaut32

VariantClear

rpcrt4

RpcStringFreeW

ntdll

RtlAdjustPrivilege
RtlAddAccessAllowedAce
NtAllocateVirtualMemory

user32

CharNextW

kernel32

lstrcmpiW
lstrcpynW
LoadLibraryExW
GetModuleFileNameW
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
SizeofResource
FreeLibrary
FindResourceW
DisableThreadLibraryCalls
GetLastError
InterlockedDecrement
lstrcpyW
lstrlenA
EnterCriticalSection
lstrcatW
LoadResource
lstrlenW
GetStartupInfoA
LeaveCriticalSection

advapi32

RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
RegDeleteKeyW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7babdc1d7d6c2cf7b88e3a3785ced56f

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

oleaut32

rpcrt4

ntdll

user32

kernel32

advapi32

ole32

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 1.4MB

.rdata Size: 298KB - Virtual size: 298KB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 1.4MB

.rdata
Size: 298KB - Virtual size: 298KB

.tls
Size: 512B - Virtual size: 4KB