fa32a79b2cc09aa6a54536badd77d798_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fa32a79b2cc09aa6a54536badd77d798_JaffaCakes118
Size

113KB
MD5

fa32a79b2cc09aa6a54536badd77d798
SHA1

697cf7beda34f1b66f1a81754c2c9f89a18217d7
SHA256

2425edc63d9c666e1cd8f515fb52231773e6fe9067e4b6aa1dd0cf64a3cf6414
SHA512

d9a453353bb78d7ab4fc81f06138cfd2e855d968d77506cfadc660bb0d5416c5b5560084cf89f556959ea1f5676b672c47951a23349f7fb397930529b6ecc3bc
SSDEEP

1536:KSRwAgSxs9F9x0NOIGwRkxPLN5blSEJyOCv/QmurdepqGBSGgw2hKSmu4wIAYW3c:KrJ9FPwkxT3blSEtClurEpqGptJ9Qg3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa32a79b2cc09aa6a54536badd77d798_JaffaCakes118

Files

fa32a79b2cc09aa6a54536badd77d798_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cc054c72a9a1ac500af951789c240396

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
LocalFree
GetLocalTime
InterlockedCompareExchange
Sleep
InterlockedExchange
InterlockedExchangeAdd
DeleteCriticalSection
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
LoadLibraryW
GetCommandLineA
lstrcmpiW
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
OutputDebugStringA
GetProcAddress
WaitForSingleObject
IsDebuggerPresent
DebugBreak
GetLocaleInfoA
CreateFileW
CloseHandle
VirtualProtect
VirtualFree
GetModuleHandleW
VirtualAlloc

user32

CharNextW

advapi32

RegDeleteValueW
RegEnumKeyExW
RegCloseKey

ole32

CoCreateInstance

msvcr71

_vsnwprintf
__CppXcptFilter
malloc
_vsnprintf
_except_handler3
_adjust_fdiv
_amsg_exit
_initterm
free
atoi
_snprintf
memset
realloc
_onexit
_lock
__dllonexit
_CxxThrowException
_XcptFilter
memcpy

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc054c72a9a1ac500af951789c240396

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcr71

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 35KB - Virtual size: 68KB

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 42KB - Virtual size: 42KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 35KB - Virtual size: 68KB

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 42KB - Virtual size: 42KB

.reloc
Size: 2KB - Virtual size: 1KB