2f6df7abc886783847f335cfbe69ef06_JaffaCakes118

General

Target

2f6df7abc886783847f335cfbe69ef06_JaffaCakes118
Size

76KB
MD5

2f6df7abc886783847f335cfbe69ef06
SHA1

0bf0c590e9cea9f278a8c3cf5c622edee3e7235e
SHA256

20372f10623640792fde809ec7fa3d2ec118062a426e73fcad39e60c544fbc99
SHA512

419f108e8b968ddb1e553aef180e9b468e04375fb4d816c90ab8d1018d37e9945b9bb5266da3170beddfdf72770e6235d3dfefcad55b65c74cc9a957b9a73a26
SSDEEP

1536:6GyZsLJkC70pTy8ZoW7mCSBU0F9eCRhoGMuV3k:FyC7movU85RhoMV0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f6df7abc886783847f335cfbe69ef06_JaffaCakes118

Files

2f6df7abc886783847f335cfbe69ef06_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1e581ce593433e4d955443b35c66ce2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoRevokeClassObject
CoTaskMemFree
CoTaskMemAlloc

avifil32

AVIFileReadData
AVIFileInit
AVIFileOpenW
AVIFileExit
AVIFileEndRecord
AVIBuildFilterW
AVIFileInfoW

kernel32

LoadLibraryA
SetEndOfFile
ReadFile
HeapReAlloc
GetProcAddress
SetEvent
GetCurrentProcess
LoadLibraryW
SetTapePosition
CloseHandle
CreatePipe
HeapFree
HeapAlloc
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
WriteFile
SetFilePointer
InitializeCriticalSection
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
FatalAppExitA
VirtualAlloc
IsBadWritePtr
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
RtlUnwind
GetModuleFileNameA
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileA

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 785KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b1e581ce593433e4d955443b35c66ce2

Headers

File Characteristics

Imports

ole32

avifil32

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 20KB - Virtual size: 785KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 20KB - Virtual size: 785KB