5c644fd0fc013e3c30d97fb79fd63e05_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5c644fd0fc013e3c30d97fb79fd63e05_JaffaCakes118
Size

32KB
MD5

5c644fd0fc013e3c30d97fb79fd63e05
SHA1

a8c0a7e78fdf2640d328dccdd09fadbe87100b6a
SHA256

b07856db226a45b334fd6bc47a431c1cfb98265c0999df4e546cf57dcf39648a
SHA512

5eeb8936d43803ff68b7f0c08ff4c78e1ba1edd0078af2fadfeb4356f629ea9b740c445c5a3fa62d68c14fed17c91e0d84ebd14ea6848a212d249fee6d06e6cc
SSDEEP

768:g4gRGXSxH4RDSpzXHeTgF48bP1kEm8KqE:g4OGX54pCsF48eeE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c644fd0fc013e3c30d97fb79fd63e05_JaffaCakes118

Files

5c644fd0fc013e3c30d97fb79fd63e05_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8c208e72b874a8265e0674219655fc3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ulib

?Resize@HMEM@@QAEEKK@Z
?SetBaudRate@COMM_DEVICE@@QAEEK@Z
?Cast@SCREEN@@SGPAV1@PBVOBJECT@@@Z
?WriteByte@STREAM@@QAEEE@Z
?Unlock@MESSAGE@@QAEXXZ
?Initialize@CONT_MEM@@QAEEPAXK@Z
??0PRINT_STREAM@@QAE@XZ
??1FSTRING@@UAE@XZ
?QueryIterator@LIST@@UBEPAVITERATOR@@XZ
??MTIMEINFO@@QBEEV0@@Z
?EraseScreen@SCREEN@@QAEEXZ
?SetOemConversions@WSTRING@@SGXXZ
?Truncate@WSTRING@@QAEKK@Z
??1MEM_ALLOCATOR@@UAE@XZ
?QueryByteCount@WSTRING@@QBEKXZ
?Initialize@WSTRING@@QAEEPBDK@Z
?UseAlternateName@FSNODE@@QAEEXZ
?SetSize@BITVECTOR@@QAEKKW4BIT@@@Z
??0WSTRING@@QAE@ABV0@@Z
?Initialize@WSTRING@@QAEEJ@Z
?Construct@OBJECT@@IAEXXZ
?Construct@WSTRING@@IAEXXZ

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
GetCurrentDirectoryA
HeapCompact
GetVolumePathNameW
SetupComm
GetCurrentDirectoryW
QueryDosDeviceW
GlobalSize
GetConsoleHardwareState
GetSystemTime
FindFirstFileExA
SetFileTime
GetComputerNameExW
SetProcessPriorityBoost
FileTimeToDosDateTime
RegisterConsoleOS2
Process32First
SetConsoleInputExeNameA
TransmitCommChar
OutputDebugStringW
GetConsoleCursorInfo
FindFirstFileW

ntdll

atoi
ZwCloseObjectAuditAlarm
RtlPinAtomInAtomTable
NtSetInformationObject
RtlEqualLuid
NtTestAlert
NtGetWriteWatch
NtMapUserPhysicalPagesScatter
RtlCancelTimer
strcmp
ZwAllocateLocallyUniqueId
ZwCreateKey
ZwDuplicateToken
NtOpenTimer
ZwOpenKey
_strupr

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c208e72b874a8265e0674219655fc3e

Headers

DLL Characteristics

File Characteristics

Imports

ulib

kernel32

ntdll

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 3KB - Virtual size: 98KB

.rdata Size: 512B - Virtual size: 373B

.rsrc Size: 1024B - Virtual size: 1000B

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 3KB - Virtual size: 98KB

.rdata
Size: 512B - Virtual size: 373B

.rsrc
Size: 1024B - Virtual size: 1000B