60bf626b9b716965e38c64b27b6b7404_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

60bf626b9b716965e38c64b27b6b7404_JaffaCakes118
Size

172KB
MD5

60bf626b9b716965e38c64b27b6b7404
SHA1

eb2c7f519e0a3087277e1e56e28d5c0aee98b586
SHA256

207f3396edb4f336d2a9d6e0ca95d65d77eaa5579b99899a8530e5b920632548
SHA512

70c23eaea652f87fb2ce6c4736ef78350060497efb35fa53cf169d1516f03dfd82e8e33826e4752c296e6d1670b8ab6851eee6d30430830910fba681c2c65ecf
SSDEEP

3072:yUF9T4I2Dp8slMDZeNgx+iR9rlzvpUM2GuwacaS0qN:99T4I21DliY6p9FB/7aFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60bf626b9b716965e38c64b27b6b7404_JaffaCakes118

Files

60bf626b9b716965e38c64b27b6b7404_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a5533f45f324d9c67d15294211c9f0a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ben\Desktop\Silly Crypt Project\SillyCryptStub\Release\SillyCryptStub.pdb

Imports

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyExW

kernel32

FreeResource
FindResourceW
LoadResource
GetModuleHandleW
VirtualFree
Sleep
SizeofResource
TerminateProcess
lstrlenW
GetProcAddress
VirtualAlloc
MoveFileW
LockResource
GetCommandLineW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapAlloc
RaiseException
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
CompareStringW
SetEnvironmentVariableW
HeapSize
WideCharToMultiByte
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5533f45f324d9c67d15294211c9f0a5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 8KB

.rsrc Size: 125KB - Virtual size: 124KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 125KB - Virtual size: 124KB

.reloc
Size: 4KB - Virtual size: 4KB