d3cf7ae4c595fb450ea2e7249fb9bc89_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d3cf7ae4c595fb450ea2e7249fb9bc89_JaffaCakes118
Size

831KB
MD5

d3cf7ae4c595fb450ea2e7249fb9bc89
SHA1

1bf9d2e8abd8a851bce74e790684ae1ce94c8f2e
SHA256

542c9814c1f9921b4ebed4799727539b74fa772a3a7d6a4e01eb97f2b8135aac
SHA512

73c2cd6468f3b9110c0c9a6219d0c401d1e48b0755357e7573da23f825839546af662fe0cbdef8c6472063b2d4b5a748571b894d086c58e872203df71504d82c
SSDEEP

24576:KRk+wmhFEkHg4H/VHlfQKi/Sk1ceKNDAvTLrl5Dy:KRBhl9H/fIJKiceK2vTLrLDy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3cf7ae4c595fb450ea2e7249fb9bc89_JaffaCakes118

Files

d3cf7ae4c595fb450ea2e7249fb9bc89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

24d3129a926f65832a5205cee9b6e917

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LeaveCriticalSection
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

DispatchMessageA
MessageBoxA

advapi32

RegCloseKey

oleaut32

SysReAllocStringLen

kernel32.dll.

LoadLibraryA

Sections

CODE
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 744KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.vmp2
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24d3129a926f65832a5205cee9b6e917

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

kernel32.dll.

Sections

CODE Size: - Virtual size: 19KB

DATA Size: - Virtual size: 264B

BSS Size: - Virtual size: 2KB

.idata Size: - Virtual size: 1KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.vmp0 Size: - Virtual size: 1KB

.rsrc Size: 744KB - Virtual size: 744KB

.vmp1 Size: - Virtual size: 30KB

.vmp2 Size: 84KB - Virtual size: 84KB

.reloc Size: 512B - Virtual size: 192B

CODE
Size: - Virtual size: 19KB

DATA
Size: - Virtual size: 264B

BSS
Size: - Virtual size: 2KB

.idata
Size: - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.vmp0
Size: - Virtual size: 1KB

.rsrc
Size: 744KB - Virtual size: 744KB

.vmp1
Size: - Virtual size: 30KB

.vmp2
Size: 84KB - Virtual size: 84KB

.reloc
Size: 512B - Virtual size: 192B