a962aeccb1dd368821e0a40c7b78d663_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a962aeccb1dd368821e0a40c7b78d663_JaffaCakes118
Size

240KB
MD5

a962aeccb1dd368821e0a40c7b78d663
SHA1

db21ef9164f48b13cee5d4c8ceabef7042ad0c9b
SHA256

f1e81f5b6573848aefd4fb447acb8f9e7a1ec8e474109dfeb89984e12765b30b
SHA512

a3050845a898045d173e27202002871e83fb7efe021b6c45a732e8a7481ff133b2739525264ee03e93066e9c97b810921c0c07483a6ec1ded9e45e29ec534fcf
SSDEEP

6144:KxXZcC/KE9IyHvOTicP8yaF/fVmo3dngaAXe:8LyHicP8ZVmoOxXe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a962aeccb1dd368821e0a40c7b78d663_JaffaCakes118

Files

a962aeccb1dd368821e0a40c7b78d663_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetSpecifiedAttributeCount
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserCreate_MM
XML_ParserFree
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_UseParserAsHandlerArg

Sections

.text
Size: 968KB - Virtual size: 968KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.neolit
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PTData
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 968KB - Virtual size: 968KB

.rdata Size: 240KB - Virtual size: 240KB

.data Size: 4KB - Virtual size: 77KB

.rsrc Size: 16KB - Virtual size: 500KB

.neolit Size: 8KB - Virtual size: 26KB

.PTData Size: 68KB - Virtual size: 68KB

.text
Size: 968KB - Virtual size: 968KB

.rdata
Size: 240KB - Virtual size: 240KB

.data
Size: 4KB - Virtual size: 77KB

.rsrc
Size: 16KB - Virtual size: 500KB

.neolit
Size: 8KB - Virtual size: 26KB

.PTData
Size: 68KB - Virtual size: 68KB