87d540ff6bfd69559faa4ac7eb835b50_JaffaCakes118

General

Target

87d540ff6bfd69559faa4ac7eb835b50_JaffaCakes118
Size

82KB
MD5

87d540ff6bfd69559faa4ac7eb835b50
SHA1

844c05145388f105a13b90a78def82a680a1ceb4
SHA256

1350ba437d039ac882790f80f4fb49917d57f00d4ec17c1c2e6126b2df496fcd
SHA512

c3897bb142aa7b2e7048d446a4d0e5a4b2658b7f6c7727e39817dcabd0ce66022ddcee3fc514d332c9c726096a3f7f3dedaf4ad57585d6eaba5f63430af36be6
SSDEEP

1536:bOvu8TFFy9CoV3TA/R/5LZjb41itqUAAd2tLbMU9zV:alZFy9C+3Tsxtb41itTd2tLIez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87d540ff6bfd69559faa4ac7eb835b50_JaffaCakes118

Files

87d540ff6bfd69559faa4ac7eb835b50_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d20ef4c78e3cecafd18c22f6d97ab98a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
LocalFree
lstrlenA
MoveFileA
DeleteFileA
InterlockedCompareExchange
ReadFile
SetCommTimeouts
ReleaseMutex
WaitForSingleObject
GetLastError
ResetEvent
WriteFile
GetSystemDirectoryA
GetLocalTime
CreateFileA
CloseHandle
GetFileSize
PurgeComm
GetProcessHeap
DisableThreadLibraryCalls
InterlockedExchange
Sleep
LocalAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
CreateDirectoryW
GetFullPathNameW
LoadLibraryW
GetProcAddress
FreeLibrary
CreateEventW
InterlockedIncrement
SetEvent
SetLastError
GetFileAttributesW
lstrlenW
HeapFree
GlobalFree
GetCommandLineA
GlobalAlloc
CreateMutexA
VirtualProtect

user32

CharPrevW

advapi32

CheckTokenMembership
RegCloseKey
RegOpenKeyExW
FreeSid
AllocateAndInitializeSid

msvcr71

_vsnprintf
__dllonexit
_except_handler3
_adjust_fdiv
_strnicmp
_itoa
strcspn
calloc
isxdigit
strstr
strchr
atoi
memset
malloc
free
_strcmpi
_onexit
_stricmp
memmove
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_cexit
swscanf
_resetstkoflw
wcsrchr
__CppXcptFilter

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d20ef4c78e3cecafd18c22f6d97ab98a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcr71

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 34KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 34KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB