4db47ea6cd19395c9978c21b084178d0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4db47ea6cd19395c9978c21b084178d0_JaffaCakes118
Size

694KB
MD5

4db47ea6cd19395c9978c21b084178d0
SHA1

5bdf04731a780f0ba530d5bca64f82e141428450
SHA256

8df3463c3e78e194789535408b307fa4ce04dc282cc6a11648c1f76a75164679
SHA512

db3aa09b75e2c35ef06bb55c961dd96fefa97e842dc92302f4bf1a8bc16f11984af2962c3e6a67fbcd7f595dd824f7ec3862f6ff875b5d19f0bc4758d6a88280
SSDEEP

12288:QIz8vzs8UdjZyFwtN4X3jHokogvz7GxGaTik1wL7a6d+BoM+1K:Q9v48s4MWqX2uY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4db47ea6cd19395c9978c21b084178d0_JaffaCakes118

Files

4db47ea6cd19395c9978c21b084178d0_JaffaCakes118
.exe windows:4 windows x64 arch:x64

7b21aa7619bb2aa1373ea5d0b08fbb22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileMappingW
CreateFileW
CreateRemoteThread
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
MapViewOfFile
OutputDebugStringA
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
WaitForSingleObject
WriteProcessMemory

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_onexit
_wcsnicmp
abort
calloc
exit
fprintf
free
fwrite
malloc
mbstowcs_s
memcmp
memcpy
signal
strchr
strcmp
strlen
strncmp
vfprintf

Sections

.text
Size: 684KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7b21aa7619bb2aa1373ea5d0b08fbb22

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 684KB - Virtual size: 684KB

.data Size: 512B - Virtual size: 208B

.rdata Size: 2KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 732B

.xdata Size: 1024B - Virtual size: 724B

.bss Size: - Virtual size: 2KB

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

.text
Size: 684KB - Virtual size: 684KB

.data
Size: 512B - Virtual size: 208B

.rdata
Size: 2KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 732B

.xdata
Size: 1024B - Virtual size: 724B

.bss
Size: - Virtual size: 2KB

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B