8974f7447580ecbccaa1f79680ef3db4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8974f7447580ecbccaa1f79680ef3db4_JaffaCakes118
Size

88KB
MD5

8974f7447580ecbccaa1f79680ef3db4
SHA1

4942e2d6278f49ba7932b9b13eca2f0c289460ec
SHA256

b083e9490e366402a3cd878eb42cb43d75d432b7dbc0d08cb99feb94566db33e
SHA512

f8895fba45fdce35daa24f3e819f42e589bb0d587e3a6d2f786c672d195eaf5b0c89ed287b6850c1f66afe1e65425bceb1e09bf3d9c09bf600cca3078a712261
SSDEEP

1536:WmK49ApDDFNTQ0B7gQE4NUp14SQo9YMvnfQphYtT2UggITys3XrtL1VAV:xKYApDDfTQQNUp14SQoqMPfSYtT2hLXG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8974f7447580ecbccaa1f79680ef3db4_JaffaCakes118

Files

8974f7447580ecbccaa1f79680ef3db4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

343b6c4fbb378636f1300ba7696a3d6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MoveFileA
SetUnhandledExceptionFilter
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetVolumeInformationA
SetCurrentDirectoryA
GetCurrentDirectoryA
LocalFree
FreeLibrary
GetWindowsDirectoryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
GetCommandLineA
CreateFileA
CloseHandle
GetPrivateProfileIntA
GetSystemDirectoryA
GetPrivateProfileStringA
lstrcmpiA
CreateDirectoryA
GetSystemInfo
GetVersionExA
GetProcessHeap
MultiByteToWideChar
VirtualProtect
FormatMessageA
HeapAlloc
HeapFree
RtlUnwind
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeW

user32

CharNextA
LoadStringA
MessageBoxExA
wsprintfA
CharPrevA

advapi32

SetNamedSecurityInfoA
GetSidSubAuthority
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegOpenKeyExA
RegCloseKey
InitializeSid
GetSidLengthRequired
RegQueryValueExA
RegEnumValueA
GetSecurityDescriptorDacl
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

343b6c4fbb378636f1300ba7696a3d6a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 44KB - Virtual size: 77KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 44KB - Virtual size: 77KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB