5aeed4b2bb47bab97790ed2f987da0e3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5aeed4b2bb47bab97790ed2f987da0e3_JaffaCakes118
Size

1.0MB
MD5

5aeed4b2bb47bab97790ed2f987da0e3
SHA1

87f5c9e5b705b55581411a38184606f461e89c75
SHA256

55140ede9eb0b96d45453ae49bbfc308777effae3578c0f747e3142eb61a3657
SHA512

93bf5411dbc2f180fed69d5a821d59e5f1979704872852c0c47d32ce050d5ba93cf470e09f9c7b92e0942b44ec99c312f331932da473002ffec900225017764d
SSDEEP

24576:HW+25ic5AmKa7N+HRRXHd+eSVGSz9BoGg93NKMxREdVUm3ep:HW+2F3+3d+f9Zg9Lqdv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aeed4b2bb47bab97790ed2f987da0e3_JaffaCakes118

Files

5aeed4b2bb47bab97790ed2f987da0e3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9ec941bbd208417d3a873b004ca45382

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

winmm

timeSetEvent

shell32

SHGetFileInfoA

comctl32

ImageList_SetIconSize

Exports

Exports

kkyy_exp

Sections

CODE
Size: - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp1
Size: - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ec941bbd208417d3a873b004ca45382

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

winmm

shell32

comctl32

Exports

Exports

Sections

CODE Size: - Virtual size: 448KB

DATA Size: - Virtual size: 7KB

BSS Size: - Virtual size: 3KB

.idata Size: - Virtual size: 9KB

.edata Size: - Virtual size: 68B

.vmp0 Size: - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 38KB

.vmp1 Size: - Virtual size: 695KB

.vmp2 Size: 1.0MB - Virtual size: 1.0MB

.reloc Size: 512B - Virtual size: 212B

CODE
Size: - Virtual size: 448KB

DATA
Size: - Virtual size: 7KB

BSS
Size: - Virtual size: 3KB

.idata
Size: - Virtual size: 9KB

.edata
Size: - Virtual size: 68B

.vmp0
Size: - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 38KB

.vmp1
Size: - Virtual size: 695KB

.vmp2
Size: 1.0MB - Virtual size: 1.0MB

.reloc
Size: 512B - Virtual size: 212B