c91206a0c09b6107afae5bad63897966_JaffaCakes118

General

Target

c91206a0c09b6107afae5bad63897966_JaffaCakes118
Size

2.1MB
MD5

c91206a0c09b6107afae5bad63897966
SHA1

0979c57a37f8f12905840bbe395068cb7ab59b71
SHA256

fe6588061844ee1b1f2fc21420c1ce37e77c3ceff9e7c19b1706e0e1187f2e1f
SHA512

10318fd1deab2b0d50338953e2b09c8c3a01a1a3b81ad92bfa924a91f762be57b80ae8978ddc7711eddb51d4d0485f741ca0815c3b650058fa68a04add02f4d2
SSDEEP

12288:X6OeXQD0D+YD4U2u2LK7EDGx7GGy3BaHEGDAE1Y9XXdP+T0/p8JeresxvH7H7:XneXQ9i23LK7Eys3xKAEWIT0OJoNvbb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c91206a0c09b6107afae5bad63897966_JaffaCakes118

Files

c91206a0c09b6107afae5bad63897966_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8be9750d069de0b6ebd497ede2defdee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
EncodePointer
RaiseException
GetLastError
SetLastError
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW

Sections

.text
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8be9750d069de0b6ebd497ede2defdee

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 578KB - Virtual size: 577KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 268B

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.text
Size: 578KB - Virtual size: 577KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 268B

.rsrc
Size: 1.5MB - Virtual size: 1.5MB