4cf5a52b575190b4161450a3d956b12d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4cf5a52b575190b4161450a3d956b12d_JaffaCakes118
Size

45KB
MD5

4cf5a52b575190b4161450a3d956b12d
SHA1

fa8a77d43e4ba1fd1a776b0d5b560eefe79c7dcf
SHA256

51810c2e6cd3bc4ac729287d96c1fd2510176c26a17844a0a8afcb7051ba50d4
SHA512

7b7a32970dcaf6733e1643cba6e9bcaacce0b90ab4a7b8566a8df1f7b7c1a3d608da8c74b3bb0648c6ab8f3803492c38002387e594cfa1607cdd88b2a655f7db
SSDEEP

768:QFRZ1McVU3YngZPYBohNHCBf6GuvB2x+FSG+bElyQny64OFTW:oz1zVngpYBoGBfSBa+8bb84d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cf5a52b575190b4161450a3d956b12d_JaffaCakes118

Files

4cf5a52b575190b4161450a3d956b12d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09cfb083dda566fb0c65be13c5f96a48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\023124\Desktop\BackupBC01.NET\Release\BackupBC01.NET.pdb

Imports

winscard

g_rgSCardT1Pci
SCardTransmit
SCardDisconnect
SCardConnectW
SCardReleaseContext
SCardListReadersW
SCardEstablishContext

msvcr90

_cexit
_encoded_null
_decode_pointer
_encode_pointer
_amsg_exit
__FrameUnwindFilter

msvcm90

?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z

kernel32

GetCurrentProcessId
Sleep
GetTickCount
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09cfb083dda566fb0c65be13c5f96a48

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winscard

msvcr90

msvcm90

kernel32

mscoree

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 340B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 340B