5dd44400a06840df770edc4be346a4b8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5dd44400a06840df770edc4be346a4b8_JaffaCakes118
Size

324KB
MD5

5dd44400a06840df770edc4be346a4b8
SHA1

2db36d3008256aa514c709dfcf32b37120feb5f7
SHA256

c14b406608fcd087feea4585e432533937bab7454af7c6c8d2f26b6970362214
SHA512

ae7441a8ca49519185f21716036e74a20015d82e705b0729280bdd15e48208234791f62d3cd86a2363e80f687999fd61b7132f6e369227a4f3e2934e27a4bb2e
SSDEEP

6144:aU/TUssSijhvu18MFho5x7UbH86e3bxIfpcsGlPizyT2dz5x7:h/Tc7h218t7UbH8Jx3RaJf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dd44400a06840df770edc4be346a4b8_JaffaCakes118

Files

5dd44400a06840df770edc4be346a4b8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

afc30593ec20b44cdb5beaac55e55bfa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcStringFreeW

ntdll

NtAllocateVirtualMemory
RtlAdjustPrivilege
RtlAddAccessAllowedAceEx

kernel32

FreeLibrary
lstrcatW
lstrlenA
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
lstrcpynW
InterlockedIncrement
LoadLibraryExW
lstrcmpiW
LeaveCriticalSection
MultiByteToWideChar
SizeofResource
lstrcpyW
GetACP
FindResourceW
LoadResource
GetStartupInfoA
GetLastError
GetModuleFileNameW
DeleteCriticalSection

advapi32

RegDeleteKeyW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegQueryInfoKeyW
RegCreateKeyExW
RegQueryValueExW

user32

CharNextW

msvcrt

wcsncat
free
_purecall
wcscpy
wcslen
_initterm
wcsncpy
_adjust_fdiv
realloc
malloc
__CxxFrameHandler
_except_handler3

oleaut32

VariantClear

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

afc30593ec20b44cdb5beaac55e55bfa

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

ntdll

kernel32

advapi32

user32

msvcrt

oleaut32

ole32

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 1.4MB

.rdata Size: 298KB - Virtual size: 298KB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 1.4MB

.rdata
Size: 298KB - Virtual size: 298KB

.tls
Size: 512B - Virtual size: 4KB