41ede367b4392c68d4d7d50db7477fd1_JaffaCakes118

General

Target

41ede367b4392c68d4d7d50db7477fd1_JaffaCakes118
Size

112KB
MD5

41ede367b4392c68d4d7d50db7477fd1
SHA1

e574132443a490af84f7f68009b1361560968adb
SHA256

3f651ec8ffcd731fc10b50dd1879796c5f811e8c0b847794f2d7c954e23bcc13
SHA512

ec2e059bb708dfe3efd0b3ea282430d9367e82bc34282207e3d6e939f08120ccc1f0907a1bd4a8a2c53d163a9bc19e4a1264913a86a4766a2dc63883893fe26b
SSDEEP

1536:BrC73411hNU7lkOoNV8eZXATHH5uVu3Fu59OuU+o2YKqyXg+iBorr:BrCjmwiNBZXITFu59ObD2YNhorr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ede367b4392c68d4d7d50db7477fd1_JaffaCakes118

Files

41ede367b4392c68d4d7d50db7477fd1_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5cea94562da7dd2a5fdd0d67c1538796

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
OpenProcess
GetModuleHandleA
FreeLibrary
GetVersionExA
DeleteFileA
CopyFileA
GetPrivateProfileStringA
FindNextFileA
GetLastError
FindFirstFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
SetEnvironmentVariableA
GetSystemDirectoryA
GetFileAttributesA
GetWindowsDirectoryA
GetCurrentProcessId
VirtualProtect
GetLocalTime
GetVersion
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
MultiByteToWideChar
ReadFile
Sleep
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
HeapSize
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cea94562da7dd2a5fdd0d67c1538796

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 25KB - Virtual size: 33KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 25KB - Virtual size: 33KB

.reloc
Size: 8KB - Virtual size: 7KB