951c11a541c98e6a1b9a2d5b082b7ccc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

951c11a541c98e6a1b9a2d5b082b7ccc_JaffaCakes118
Size

120KB
MD5

951c11a541c98e6a1b9a2d5b082b7ccc
SHA1

ce6c6964aaea5759184ab9088ac9d3d898d41316
SHA256

aee0723c7a9364e89e56264f77796300648b17a759502c3fb06e122643d51b01
SHA512

f3befeb59aa8a743eee3e7c6188335af8e4bc71c0d937bb4a6fd8d963dd9d1d1352abcf378bde7f2a44f3049c221ba45cb7837f6a6e3bfbc6ac4f6719e2296c8
SSDEEP

3072:pMscqRz2ye+XTOLTJK5LYKoIxLhAfv087OTpT6baYotovPWF:pMscqRzzTOLTJEL6fc87St+Vv+F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
951c11a541c98e6a1b9a2d5b082b7ccc_JaffaCakes118

Files

951c11a541c98e6a1b9a2d5b082b7ccc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d60a80fc16537113d406daaff7570584

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetCurrentDirectoryA
GetShortPathNameA
FindResourceExA
EnumResourceLanguagesA
ResumeThread
WriteProcessMemory
RaiseException
SetFileAttributesA
CreateDirectoryA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LocalFree
GetProcAddress
GetModuleFileNameW
InitializeCriticalSection
WideCharToMultiByte
RtlUnwind
GetStringTypeW

user32

DefWindowProcA
SetFocus
AdjustWindowRectEx

advapi32

RegCreateKeyA
RegSetValueA
RegCloseKey

ole32

ReadClassStm
CoRegisterClassObject

oleaut32

SysAllocString

Sections

0
Size: 28KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

3
Size: 48KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 8KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d60a80fc16537113d406daaff7570584

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

0 Size: 28KB - Virtual size: 56KB

1 Size: 24KB - Virtual size: 23KB

2 Size: - Virtual size: 12B

3 Size: 48KB - Virtual size: 70KB

4 Size: 8KB - Virtual size: 4KB

5 Size: 8KB - Virtual size: 30KB

0
Size: 28KB - Virtual size: 56KB

1
Size: 24KB - Virtual size: 23KB

2
Size: - Virtual size: 12B

3
Size: 48KB - Virtual size: 70KB

4
Size: 8KB - Virtual size: 4KB

5
Size: 8KB - Virtual size: 30KB