a8ba70b823fe9c52778baea0cff1d5da_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a8ba70b823fe9c52778baea0cff1d5da_JaffaCakes118
Size

62KB
MD5

a8ba70b823fe9c52778baea0cff1d5da
SHA1

eb09aa0f21cc72250a6d375ea4bfc3dd05bf932d
SHA256

5ef1fcf68ba3a7dce8110dc99e35b7e269f6257862b758fe9240dbe1b4b45dde
SHA512

d43367dd6d2da0407a3bd5b32921a107f273549bc1351ffc349a4a394d7203ebe0f4cb45242b73dbc06d4c3bff46259f83546b67be0265f686d7ac819ee475be
SSDEEP

768:UBKCzjZm+oKJk1rbn+Jyjw0Dl0GaXGd1avMq/6ELg/3C:UBH3sdn7j5tasmD3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8ba70b823fe9c52778baea0cff1d5da_JaffaCakes118

Files

a8ba70b823fe9c52778baea0cff1d5da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4143210abce1dea1d825feb54303a17c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
FileTimeToDosDateTime
GetFileAttributesA
GetCurrentProcess
GetCurrentDirectoryW
GetSystemInfo
GetACP
InitializeCriticalSection
CreateEventA
GetLastError
CreateMutexA
WaitForSingleObject
SetEvent
GetTickCount
FreeLibrary
GetVersionExA
MultiByteToWideChar
GetProcessHeap
GetProcAddress

softpub

OfficeCleanupPolicy
DllUnregisterServer
GenericChainFinalProv

dpnaddr

DirectPlay8AddressCreate

Sections

.icode
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aH
Size: 5KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ZAEV
Size: 512B - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bzhlST
Size: 4KB - Virtual size: 817KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wa
Size: 5KB - Virtual size: 897KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 9KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Q
Size: 5KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4143210abce1dea1d825feb54303a17c

Headers

File Characteristics

Imports

kernel32

softpub

dpnaddr

Sections

.icode Size: 3KB - Virtual size: 2KB

.aH Size: 5KB - Virtual size: 1.1MB

.text Size: 15KB - Virtual size: 15KB

.ZAEV Size: 512B - Virtual size: 82KB

.bzhlST Size: 4KB - Virtual size: 817KB

.rdata Size: 1024B - Virtual size: 6KB

.wa Size: 5KB - Virtual size: 897KB

.edata Size: 9KB - Virtual size: 90KB

.Q Size: 5KB - Virtual size: 148KB

.data Size: 6KB - Virtual size: 79KB

.edata Size: 5KB - Virtual size: 90KB

.rsrc Size: 2KB - Virtual size: 1KB

.icode
Size: 3KB - Virtual size: 2KB

.aH
Size: 5KB - Virtual size: 1.1MB

.text
Size: 15KB - Virtual size: 15KB

.ZAEV
Size: 512B - Virtual size: 82KB

.bzhlST
Size: 4KB - Virtual size: 817KB

.rdata
Size: 1024B - Virtual size: 6KB

.wa
Size: 5KB - Virtual size: 897KB

.edata
Size: 9KB - Virtual size: 90KB

.Q
Size: 5KB - Virtual size: 148KB

.data
Size: 6KB - Virtual size: 79KB

.edata
Size: 5KB - Virtual size: 90KB

.rsrc
Size: 2KB - Virtual size: 1KB