41bd6cc08b140a255a09ad3ee6fe37ad_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

41bd6cc08b140a255a09ad3ee6fe37ad_JaffaCakes118
Size

26KB
MD5

41bd6cc08b140a255a09ad3ee6fe37ad
SHA1

6192e39d0fe2282e6b2252fd5fefaf3fa884c41d
SHA256

244bb44df9675e7e16855e56d91cce5c3a57c3a6084b305be52e131817bd5c32
SHA512

a333c6d7653bd8ee7b42daab624c181ab1498c96a995fa0fd7baaa7ebbe9e4b3c6add3c35aa45a900d1907ee40fdb1b7edd7bd70c453dffde82626bc0ca9c4c6
SSDEEP

384:j/9dfZ+bCxvdk3X8ECZ2sryE+cJINEf11e4Cp3HM:j9dfZ+2xVSti2myQtMHM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41bd6cc08b140a255a09ad3ee6fe37ad_JaffaCakes118

Files

41bd6cc08b140a255a09ad3ee6fe37ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8afdb503d1e5313a20d0ce91b2db16c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
LoadLibraryA
Beep
CreateEventA
CreateMutexW
DeleteCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
FindNextVolumeA
FindNextVolumeMountPointW
FlushConsoleInputBuffer
GetCompressedFileSizeW
GetConsoleOutputCP
GetCurrencyFormatA
GetCurrentThread
GetNamedPipeInfo
GetStdHandle
GetSystemPowerStatus
GetTapeParameters
GetTempPathA
GetVolumeNameForVolumeMountPointA
GlobalMemoryStatusEx
GlobalReAlloc
HeapCompact
LoadModule
Module32FirstW
MoveFileA
OpenJobObjectW
ReadConsoleOutputAttribute
SetCalendarInfoA
SetCommBreak
SetConsoleTitleW
SetDefaultCommConfigA
SetProcessShutdownParameters
SetTapeParameters
SetThreadContext
SetThreadExecutionState
SleepEx
TlsGetValue
WaitCommEvent
WriteConsoleOutputA
WriteFile
WritePrivateProfileStructW
WriteProcessMemory
WriteProfileSectionW
_hread
_lwrite
lstrcpyn

msvcrt

memset
memcpy

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

b1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

b2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

b3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

b4
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8afdb503d1e5313a20d0ce91b2db16c6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 1KB - Virtual size: 1KB

b1 Size: 1024B - Virtual size: 1000B

b2 Size: 1024B - Virtual size: 1000B

b3 Size: 1024B - Virtual size: 1000B

b4 Size: 8KB - Virtual size: 7KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 128B

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 1KB - Virtual size: 1KB

b1
Size: 1024B - Virtual size: 1000B

b2
Size: 1024B - Virtual size: 1000B

b3
Size: 1024B - Virtual size: 1000B

b4
Size: 8KB - Virtual size: 7KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 128B

.rsrc
Size: 10KB - Virtual size: 9KB