d9d833180eb15153e2cfa9864a2afeba_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d9d833180eb15153e2cfa9864a2afeba_JaffaCakes118
Size

259KB
MD5

d9d833180eb15153e2cfa9864a2afeba
SHA1

573465ed6c6a8a383ee924f67611b28982d720de
SHA256

2353aea997548dd3e69193c4e69babb0323074dfc524a3b3ddcf152d9d1fb3d0
SHA512

6d32b6057ea9e91e48189faef7cba21f5737badd17995edce16a66d313fa0fa43bd66c4e26dd42b42e1ce2765a4a962dfb977ed555cb76eb4f2a35fd201c8fc8
SSDEEP

6144:S63U/9hC4dzQhzIqszfeU/HxeTHevfiYy:LU1hCYzAIBfeUPx4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9d833180eb15153e2cfa9864a2afeba_JaffaCakes118

Files

d9d833180eb15153e2cfa9864a2afeba_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b9135c6dc592eed1369979376040fa76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

_decode_pointer
_encode_pointer
_crt_debugger_hook
_except_handler4_common
_encoded_null
asin
_cexit
_amsg_exit
__FrameUnwindFilter

kernel32

GetProcAddress
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
LocalAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
SystemTimeToTzSpecificLocalTime
FormatMessageW
GetModuleHandleA
WaitForSingleObject
FileTimeToSystemTime
GetSystemRegistryQuota
ExitProcess
GetLastError
WriteFile
QueryPerformanceCounter

user32

CreateCaret
GetWindowTextLengthW
ShowWindow
LoadCursorA
UpdateWindow
GetWindowRect

msvcm90

?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9135c6dc592eed1369979376040fa76

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

kernel32

user32

msvcm90

mscoree

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 201KB - Virtual size: 201KB

.data Size: 512B - Virtual size: 7KB

.rsrc Size: 51KB - Virtual size: 51KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 201KB - Virtual size: 201KB

.data
Size: 512B - Virtual size: 7KB

.rsrc
Size: 51KB - Virtual size: 51KB