e2171b90e0c54855f93a378a628fea67_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e2171b90e0c54855f93a378a628fea67_JaffaCakes118
Size

62KB
MD5

e2171b90e0c54855f93a378a628fea67
SHA1

e94436388826a58fd055a30d3813b63b2e63f386
SHA256

73f962ea197c24b2612129259186d42024bd8d8ffde63344789362cca4839343
SHA512

6a0332cc4739c3587cc5256a87c076f7ea09610822975861c9c23d259b93d8e72454ba59c3537b45566792e2483ed3e98c6205a74fe63d6c8d87f369a4f165d7
SSDEEP

768:pBKCzjZm+oKJk1rbn+Jyjw0Dl0GaXGd1avMq/6ELg/3C:pBH3sdn7j5tasmD3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2171b90e0c54855f93a378a628fea67_JaffaCakes118

Files

e2171b90e0c54855f93a378a628fea67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4143210abce1dea1d825feb54303a17c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
FileTimeToDosDateTime
GetFileAttributesA
GetCurrentProcess
GetCurrentDirectoryW
GetSystemInfo
GetACP
InitializeCriticalSection
CreateEventA
GetLastError
CreateMutexA
WaitForSingleObject
SetEvent
GetTickCount
FreeLibrary
GetVersionExA
MultiByteToWideChar
GetProcessHeap
GetProcAddress

softpub

OfficeCleanupPolicy
DllUnregisterServer
GenericChainFinalProv

dpnaddr

DirectPlay8AddressCreate

Sections

.icode
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aH
Size: 5KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ZAEV
Size: 512B - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bzhlST
Size: 4KB - Virtual size: 817KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wa
Size: 5KB - Virtual size: 897KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 9KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Q
Size: 5KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4143210abce1dea1d825feb54303a17c

Headers

File Characteristics

Imports

kernel32

softpub

dpnaddr

Sections

.icode Size: 3KB - Virtual size: 2KB

.aH Size: 5KB - Virtual size: 1.1MB

.text Size: 15KB - Virtual size: 15KB

.ZAEV Size: 512B - Virtual size: 82KB

.bzhlST Size: 4KB - Virtual size: 817KB

.rdata Size: 1024B - Virtual size: 6KB

.wa Size: 5KB - Virtual size: 897KB

.edata Size: 9KB - Virtual size: 90KB

.Q Size: 5KB - Virtual size: 148KB

.data Size: 6KB - Virtual size: 79KB

.edata Size: 5KB - Virtual size: 90KB

.rsrc Size: 2KB - Virtual size: 1KB

.icode
Size: 3KB - Virtual size: 2KB

.aH
Size: 5KB - Virtual size: 1.1MB

.text
Size: 15KB - Virtual size: 15KB

.ZAEV
Size: 512B - Virtual size: 82KB

.bzhlST
Size: 4KB - Virtual size: 817KB

.rdata
Size: 1024B - Virtual size: 6KB

.wa
Size: 5KB - Virtual size: 897KB

.edata
Size: 9KB - Virtual size: 90KB

.Q
Size: 5KB - Virtual size: 148KB

.data
Size: 6KB - Virtual size: 79KB

.edata
Size: 5KB - Virtual size: 90KB

.rsrc
Size: 2KB - Virtual size: 1KB