3d14b3467c42aacb265340e3934d20ef_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3d14b3467c42aacb265340e3934d20ef_JaffaCakes118
Size

156KB
MD5

3d14b3467c42aacb265340e3934d20ef
SHA1

1b78e0292bd262be97d254e1f448751e9a8f35f2
SHA256

bf3686c7e2640f8dff6f97fea645447ebb895d890450d55d61125d58c7e70c14
SHA512

d3661e32707507fb47e01f63b7ac5ff29d4c9dacd73e7dcefab70082cda71c7617e8c987210a6f0ed49b3d9edd62638189bbe8fcf2ed33968b5fac3631fa8461
SSDEEP

3072:gJWb/eny+X2ZN/jV7AuHPc7YXVYjRg0qEJOHR0z+HGuasBOe/y9a9hmuM7tiiGgK:gJWCny+X4/jVZ07McJO0hDsBOwy9a6uP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d14b3467c42aacb265340e3934d20ef_JaffaCakes118

Files

3d14b3467c42aacb265340e3934d20ef_JaffaCakes118
.exe windows:5 windows x86 arch:x86

14747b397c1092c691f25728c76bf3bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_except_handler3
_exit
_c_exit
_wcsicmp
sprintf
setlocale
wcsncpy
wcscat
wcscpy
wcsrchr
iswctype
fgetwc
towlower
vswprintf
_XcptFilter
_iob
fwprintf
wcslen
printf

kernel32

CreateProcessA
WriteFile
SetFilePointer
CreateFileW
WriteConsoleW
GetFileType
GetStdHandle
LocalFree
LocalAlloc
FormatMessageW
GetLastError
GetCurrentDirectoryW
FreeLibrary
SetConsoleCtrlHandler
GetModuleHandleW
GetModuleHandleA
GetConsoleOutputCP
CloseHandle

scecli

SceCloseProfile
SceFreeMemory
SceGetSecurityProfileInfo
SceOpenProfile
SceRegisterRegValues
SceBrowseDatabaseTable
SceConfigureSystem
SceAnalyzeSystem
SceIsSystemDatabase
SceSetupGenerateTemplate

user32

LoadStringW

shlwapi

PathIsRootW
PathCanonicalizeW
PathIsDirectoryW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 57KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

14747b397c1092c691f25728c76bf3bb

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

scecli

user32

shlwapi

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 48B

.rsrc Size: 5KB - Virtual size: 5KB

.data Size: 75KB - Virtual size: 128KB

.text Size: 57KB - Virtual size: 156KB

.data Size: 7KB - Virtual size: 7KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 48B

.rsrc
Size: 5KB - Virtual size: 5KB

.data
Size: 75KB - Virtual size: 128KB

.text
Size: 57KB - Virtual size: 156KB

.data
Size: 7KB - Virtual size: 7KB