b1ac88e4dd27a64804f8ae2365381df3_JaffaCakes118

General

Target

b1ac88e4dd27a64804f8ae2365381df3_JaffaCakes118
Size

68KB
MD5

b1ac88e4dd27a64804f8ae2365381df3
SHA1

7cbe14eb06ff31382b6233a79f2439e703ab1126
SHA256

822eda0c130aaa544e9b94105703ab6260360a80e9c977a0a3d99205d405d876
SHA512

49fc4355127ef0669cca5044fc63fcdc0989afac542e826661078fcca0044e3b1aab8b4171b8686deaa5ce0b5e588c651c4c9505dcbadba16530fec95e17bacc
SSDEEP

1536:VKG1UlbtLUbLTA1S2cWW58786NHEpc6kqzJAJ:VKG1UlbUTA812HEaqzJAJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1ac88e4dd27a64804f8ae2365381df3_JaffaCakes118

Files

b1ac88e4dd27a64804f8ae2365381df3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d76425e973e5a8c6b06ecc5d2e85c138

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleFileNameA
CreateFileA
GetLastError
FormatMessageA
LocalFree
GetFileSize
CloseHandle
GetProcessHeap
HeapAlloc
HeapFree
TerminateProcess
GetFileTime
GetSystemTimeAsFileTime
MoveFileA
SetFileAttributesA
GetShortPathNameA
CompareStringA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetLastError
FreeLibrary
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
lstrlenA
DisableThreadLibraryCalls
GlobalFree
GetCommandLineA
VirtualProtect
GetTempPathA
GlobalAlloc

user32

MessageBoxA
LoadStringA

advapi32

RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

gdi32

GetObjectA
GetDeviceCaps
GetObjectType
GetCurrentObject

rpcrt4

NdrDllRegisterProxy

msvcr71

_vsnprintf
__dllonexit
__CppXcptFilter
_adjust_fdiv
_except_handler3
free
_XcptFilter
_onexit
_initterm
malloc

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d76425e973e5a8c6b06ecc5d2e85c138

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

rpcrt4

msvcr71

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 36KB - Virtual size: 68KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 36KB - Virtual size: 68KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB