4569969e085cbe8851d373dc5666f487_JaffaCakes118

General

Target

4569969e085cbe8851d373dc5666f487_JaffaCakes118
Size

98KB
MD5

4569969e085cbe8851d373dc5666f487
SHA1

dc23e88bb63cf75b5bc1d93013928d1d192c2c68
SHA256

9b1d0fc2ec5b428913c3e027070fa18962ee8dfd9fadf6347c68970624832c1a
SHA512

ef7002ced1833415c1bdd7dea0728dc7236377ee7f99e4a570af022d8c3a5d9e16aee8a79626655a777dd484827fe89853cb683fbea3dc10d031fa31f371572b
SSDEEP

1536:DlxyJy+SDalb7AeMOvkbC/NfGImIDTX5QbWqndtEgEpPbM5R+mqI/jmPjWNeot0:DPyJyXa6Ulfdp0WiCQ3FyLWNe80Dm64

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4569969e085cbe8851d373dc5666f487_JaffaCakes118

Files

4569969e085cbe8851d373dc5666f487_JaffaCakes118
.dll windows:1 windows x86 arch:x86

30d0db38152ed8c57bc95f79efedfa5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalUnlock
LocalLock
LocalAlloc
LocalFree
LocalHandle
GetEnvironmentStrings
GetCommandLineA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GlobalLock
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError

Exports

Exports

GiveRowInformation
VwAllocProc
VwDoSpecial
VwFreeProc
VwGetData
VwGetInfo
VwGetRtns
VwGetSectionData
VwLocalDown
VwLocalUp
VwSetData
VwSetSectionData
VwSetSoRtn
VwSetUser
VwStreamClose
VwStreamOpen
VwStreamRead
VwStreamReadRecord
VwStreamSection
VwStreamSeek
VwStreamTell

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30d0db38152ed8c57bc95f79efedfa5b

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 31KB

.bss Size: - Virtual size: 1KB

.data Size: 5KB - Virtual size: 4KB

.idata Size: 1024B - Virtual size: 832B

.edata Size: 57KB - Virtual size: 56KB

.rsrc Size: 1024B - Virtual size: 980B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 31KB - Virtual size: 31KB

.bss
Size: - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 4KB

.idata
Size: 1024B - Virtual size: 832B

.edata
Size: 57KB - Virtual size: 56KB

.rsrc
Size: 1024B - Virtual size: 980B

.reloc
Size: 1KB - Virtual size: 1KB