d0ff4361eb3904e857b3055449de8881_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d0ff4361eb3904e857b3055449de8881_JaffaCakes118
Size

791KB
MD5

d0ff4361eb3904e857b3055449de8881
SHA1

1b11337b99f3e37c59b0d9b9eeeeb83f4f4b379c
SHA256

353122ba17c187329a0c4c80a54857e79b08509f238684905f3d89d8e8eb34ff
SHA512

556a6574859adb6a99da112af04dc9b800c6e6a4b3606d046e838e7175bf2c400565197a7089b4bec736a5f981a9c373a887132fd7e33a84f78cbd5fa51e711f
SSDEEP

24576:w7SPL7ypiWeo7hwD5AwHu9EGQ4MyoPtW5I:yKybfjD9EGFM25I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0ff4361eb3904e857b3055449de8881_JaffaCakes118

Files

d0ff4361eb3904e857b3055449de8881_JaffaCakes118
.exe windows:5 windows x86 arch:x86

77b28de302b7090cb9ee755734ce1885

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHFormatDrive

kernel32

GetProcessHeap
SetFilePointerEx
FindVolumeMountPointClose
ReadConsoleOutputAttribute
EnumResourceNamesA
SetCommBreak
GetSystemInfo
FindResourceA
LoadLibraryA
FreeLibrary
CompareStringA
InterlockedExchange
GetModuleHandleA
SetLastError
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetUserDefaultLCID
IsValidLocale
HeapSize
HeapReAlloc
HeapAlloc
RtlUnwind
SetConsoleCtrlHandler
IsDebuggerPresent
GetOEMCP
GetACP
HeapFree
FatalAppExitA
GetCommandLineA
GetLastError
GetCurrentThread
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
CloseHandle
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
EnterCriticalSection
LeaveCriticalSection

user32

DestroyWindow
BringWindowToTop
DrawTextExA
CountClipboardFormats
LookupIconIdFromDirectoryEx
MapWindowPoints
CreateIcon

ole32

CoInstall
CreateClassMoniker
CoFileTimeToDosDateTime
HPALETTE_UserMarshal
HMETAFILEPICT_UserUnmarshal
OleCreateLinkEx
CoRevertToSelf

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 622KB - Virtual size: 621KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77b28de302b7090cb9ee755734ce1885

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

user32

ole32

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 32KB - Virtual size: 40KB

.rsrc Size: 622KB - Virtual size: 621KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 32KB - Virtual size: 40KB

.rsrc
Size: 622KB - Virtual size: 621KB

.reloc
Size: 8KB - Virtual size: 7KB