84e610f2e2322e4514b4f81bfa55ee29_JaffaCakes118

General

Target

84e610f2e2322e4514b4f81bfa55ee29_JaffaCakes118
Size

48KB
MD5

84e610f2e2322e4514b4f81bfa55ee29
SHA1

9367074acf37866fe1fab20e2fc1f7ea24e4d263
SHA256

86f9cf4c8b4471cc9ddf35ecabfc97192de6b25c0d9f75500a10ac848db71a62
SHA512

879b2f6999165e5e54c31bd02d1f63e0c12026ce99b547b1dd7642b52aedba28adc52455e7ce312f9f17462c8a273c198957bcabc8c0e5ef8fca23adf5216d4e
SSDEEP

768:oQOG4QiX3unalBwHPu87mABRdiiRDaBXHm5lLiMV+WjKzurdl+4v3E:Xz4QalCv3/BRdiiRp5lLTV/Ssl/E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84e610f2e2322e4514b4f81bfa55ee29_JaffaCakes118

Files

84e610f2e2322e4514b4f81bfa55ee29_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8ee2fe65f2a77150c3a1b8c0009faec8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\PT_Tools\Pt\Release\PT.pdb

Imports

kernel32

Beep
WaitForSingleObject
CreateThread
GetSystemInfo
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
LCMapStringA
MultiByteToWideChar
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
VirtualProtect

user32

FindWindowA
SetTimer
KillTimer
GetAsyncKeyState

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ee2fe65f2a77150c3a1b8c0009faec8

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 3KB