314c80155c7c61d4c58e249b8293c109_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

314c80155c7c61d4c58e249b8293c109_JaffaCakes118
Size

720KB
MD5

314c80155c7c61d4c58e249b8293c109
SHA1

89a24ce8e30a6fe9db06da75ab8839c621525194
SHA256

db4e5059f17ccc1415029bd2c80266ec97237790bd37aac33b6eab075cfad551
SHA512

00542fab0ee6e35753b82afbd35acccdbbb4649c1c308ad4a66518b19b202b1fc81ea98332640d4ff31bd658e9faf6196152d25b2ad60302275c176b50d8dc82
SSDEEP

12288:b9+XJXlt+522DaTIiOqgnSdoJpBWz8QEnoDcoMCHilCww+8C6s4ZM5yh2c:bIJVt+56JOLSqZ5nF+Ej8Cj4S5yB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
314c80155c7c61d4c58e249b8293c109_JaffaCakes118

Files

314c80155c7c61d4c58e249b8293c109_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetSpecifiedAttributeCount
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserCreate_MM
XML_ParserFree
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_UseParserAsHandlerArg

Sections

.text
Size: 928KB - Virtual size: 928KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.neolit
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PTData
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 928KB - Virtual size: 928KB

.rdata Size: 236KB - Virtual size: 236KB

.data Size: 4KB - Virtual size: 74KB

.rsrc Size: 16KB - Virtual size: 387KB

.neolit Size: 8KB - Virtual size: 26KB

.PTData Size: 8KB - Virtual size: 8KB

.text
Size: 928KB - Virtual size: 928KB

.rdata
Size: 236KB - Virtual size: 236KB

.data
Size: 4KB - Virtual size: 74KB

.rsrc
Size: 16KB - Virtual size: 387KB

.neolit
Size: 8KB - Virtual size: 26KB

.PTData
Size: 8KB - Virtual size: 8KB