f9ccdee57eed95493f6e0b6d10765be4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f9ccdee57eed95493f6e0b6d10765be4_JaffaCakes118
Size

73KB
MD5

f9ccdee57eed95493f6e0b6d10765be4
SHA1

90348a0863fbedd97b589a07b504a5ffa2a14e39
SHA256

b81ca9ff278532b3c8c782575abdbd152ddb4e7b6b9f2f9efa5e1814a82353c7
SHA512

c98b4fc22a59954da37b0cd2b111fc4208a79f2dcacf2cc40254a80fd5ab87d13f43695cb1f63d1f65daae578dc74392151ff881202937f4e2bd93aeeca63d47
SSDEEP

1536:AZQCYa4n2hddbV1PTfi6YhaOAPjz3J6pandcFEBWkKPBODB+COSj5t6W:A+Cf423dhx6HhCganFBWkKPuJP6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9ccdee57eed95493f6e0b6d10765be4_JaffaCakes118

Files

f9ccdee57eed95493f6e0b6d10765be4_JaffaCakes118
.exe windows:10 windows x86 arch:x86

4d6471b31f704372bee62b2e553226e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

free

cryptsp

CryptHashData

api-ms-win-core-kernel32-legacy-l1-1-1

PowerSetRequest

api-ms-win-core-misc-l1-1-0

Sleep

api-ms-win-eventing-provider-l1-1-0

EventWrite

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

api-ms-win-core-errorhandling-l1-1-1

GetLastError

api-ms-win-core-synch-l1-2-0

SetEvent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l1-2-0

HeapSetInformation

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer

api-ms-win-core-processthreads-l1-1-2

SetThreadToken

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetTickCount

api-ms-win-core-debug-l1-1-1

IsDebuggerPresent

api-ms-win-core-registry-l1-1-0

RegCloseKey

api-ms-win-core-string-l1-1-0

WideCharToMultiByte

api-ms-win-core-file-l1-2-1

WriteFile

api-ms-win-security-base-l1-2-0

RevertToSelf

api-ms-win-core-processenvironment-l1-2-0

GetEnvironmentVariableW

api-ms-win-core-path-l1-1-0

PathCchCombine

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-core-localization-l1-2-1

LCMapStringEx

ntdll

ZwClose

api-ms-win-appmodel-runtime-l1-1-0

PackageNameAndPublisherIdFromFamilyName

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

DelayLoadFailureHook

Sections

.MPRESS1
Size: 65KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4d6471b31f704372bee62b2e553226e4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

cryptsp

api-ms-win-core-kernel32-legacy-l1-1-1

api-ms-win-core-misc-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-synch-l1-2-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-heap-l1-2-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-debug-l1-1-1

api-ms-win-core-registry-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-file-l1-2-1

api-ms-win-security-base-l1-2-0

api-ms-win-core-processenvironment-l1-2-0

api-ms-win-core-path-l1-1-0

api-ms-win-core-registry-l1-1-1

api-ms-win-core-localization-l1-2-1

ntdll

api-ms-win-appmodel-runtime-l1-1-0

api-ms-win-core-apiquery-l1-1-0

api-ms-win-core-delayload-l1-1-1

Sections

.MPRESS1 Size: 65KB - Virtual size: 228KB

.MPRESS2 Size: 5KB - Virtual size: 5KB

.rsrc Size: 2KB - Virtual size: 1KB

.MPRESS1
Size: 65KB - Virtual size: 228KB

.MPRESS2
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 2KB - Virtual size: 1KB