93db50ab6a7ecffe2074bc71afc27169_JaffaCakes118

General

Target

93db50ab6a7ecffe2074bc71afc27169_JaffaCakes118
Size

76KB
MD5

93db50ab6a7ecffe2074bc71afc27169
SHA1

8289ec1cee3ad19b06b88ff28939e5389a19d2d6
SHA256

3d5af4b1d13b48bb7f8c22312255c102653b50ea939c3d9b3f66c9b40516e8d7
SHA512

a58485c7fb59a65972b96ef46db81544d327e96fd20c3ef588b81a37a199b7b0d264e4b9d06c69f7c51acad7fb78ead9c98ee74a2e4fd6ae25ecd4fa3eb0a784
SSDEEP

1536:f72Vai9UpNd5sAJhKjHUOsCNDa2KkALVmPVtNNbEwpi:f72wi6rVhKTzsCpFlPVDNI8i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93db50ab6a7ecffe2074bc71afc27169_JaffaCakes118

Files

93db50ab6a7ecffe2074bc71afc27169_JaffaCakes118
.dll windows:4 windows x86 arch:x86

30d67248742df645b9abce7b571bdd5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\repack\miniloader\build\release\obj\src\main\miniloader-patchdate-stub.pdb

Imports

kernel32

ExitProcess
SetEvent
OpenEventW
SetCurrentDirectoryW
GetSystemDirectoryW
SetLastError
ExpandEnvironmentStringsW
GetStartupInfoW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindFirstFileW
FindClose
GetLocalTime
CreateThread
DeviceIoControl
SetErrorMode
GetVolumeInformationW
GetDiskFreeSpaceW
GetCommandLineW
GetDriveTypeW
SetVolumeLabelW
GetEnvironmentVariableW
Sleep
CloseHandle
SetStdHandle
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetFilePointer
GetLastError
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
lstrcpyA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetVersion
GetCommandLineA
RtlUnwind
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
GetCurrentProcess
TerminateProcess
HeapFree
HeapAlloc
GetProcessHeap

Exports

Exports

bbmcfub

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30d67248742df645b9abce7b571bdd5d

Headers

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 38KB

.data Size: 20KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 536B

.text
Size: 40KB - Virtual size: 38KB

.data
Size: 20KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 536B