8461b5dab2bce307ed453ad09df37a80_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8461b5dab2bce307ed453ad09df37a80_JaffaCakes118
Size

188KB
MD5

8461b5dab2bce307ed453ad09df37a80
SHA1

b64215b86f23b363918bec736002709daa1b208e
SHA256

0f89bd8c0ec9ab9ff767e9bbf4d68e54de7d66a504c3ac8f39451c070308bb9b
SHA512

09bcd3b76201f3ca1991754f3c6a8fe4b511a7d764932a7e733cda84c405c152a236b9b4e7de3ff5b65c3e3c8f91baaa8831555c47cf4e8bf7cf79ed218aec0f
SSDEEP

3072:ThySR8nGqBrGnE/XoQC9aXPQPPfqpzY3RlvI1AJtUsHpNoHudCTjtM:dyU8nGqBrGn4oQnFpUzI1OH/tat

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8461b5dab2bce307ed453ad09df37a80_JaffaCakes118

Files

8461b5dab2bce307ed453ad09df37a80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a122ce8e29e4a0ef229991d675f7387b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Kudaj\Lipuxi\Oluh\Wybufa\Ome\Dybytos\Vytol.pdb

Imports

dbghelp

MiniDumpWriteDump

wintrust

WinVerifyTrust

rasapi32

RasGetConnectStatusW
RasEnumConnectionsW

kernel32

FreeEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetSystemInfo
VirtualProtect
Sleep
CreateProcessW
CloseHandle
GetStartupInfoW
CopyFileW
DeleteFileW
GetTickCount
GetLocalTime
CreateFileW
HeapFree
HeapAlloc
GetProfileStringW
CreatePipe
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
RtlUnwind
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
HeapReAlloc
HeapSize
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
VirtualAlloc
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetConsoleCtrlHandler
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 588KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a122ce8e29e4a0ef229991d675f7387b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

dbghelp

wintrust

rasapi32

kernel32

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 48KB - Virtual size: 588KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 48KB - Virtual size: 588KB

.rsrc
Size: 4KB - Virtual size: 1KB