ff2c3b5b4622d605931027cd9d41f8a8_JaffaCakes118

General

Target

ff2c3b5b4622d605931027cd9d41f8a8_JaffaCakes118
Size

56KB
MD5

ff2c3b5b4622d605931027cd9d41f8a8
SHA1

cb792f489ce726b078c95d0f4cfb51f50801bdab
SHA256

0e816709573919b10025f15209dddd876905ad05eef996f74dba3009d6c8f26e
SHA512

0bfffec4c3221c532cd63e3be7a421afd2404a9dd269ccd02f7a968261acdd159551e5dfd4c3fecf81c4a82afbc561cd180962cc3f5ed68dfa9a2e7af66e9d64
SSDEEP

768:Hp8oDH3HEa6rjBMq0ONw7UV1otyAOUPP9V6YjiT04GuzID9:H1jXEjdiOb1oM1UPPAQhuzi9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff2c3b5b4622d605931027cd9d41f8a8_JaffaCakes118

Files

ff2c3b5b4622d605931027cd9d41f8a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b670f2cd492376edc352dae2b6066846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\odin\miniloader\build\release\obj\src\main\miniloader-patchdate-stub.pdb

Imports

kernel32

ExitProcess
SetEvent
OpenEventW
SetCurrentDirectoryW
GetSystemDirectoryW
SetLastError
ExpandEnvironmentStringsW
GetStartupInfoW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindFirstFileW
FindClose
GetLocalTime
CreateThread
DeviceIoControl
SetErrorMode
GetVolumeInformationW
GetDiskFreeSpaceW
GetCommandLineW
GetDriveTypeW
SetVolumeLabelW
GetEnvironmentVariableW
Sleep
CloseHandle
SetStdHandle
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetFilePointer
GetLastError
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
lstrcpyA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetVersion
GetCommandLineA
RtlUnwind
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
GetCurrentProcess
TerminateProcess
HeapFree
HeapAlloc
GetProcessHeap
InterlockedExchange
InterlockedCompareExchange

msvcrt

free
_initterm
_amsg_exit
_adjust_fdiv
_except_handler4_common
_XcptFilter
malloc

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b670f2cd492376edc352dae2b6066846

Headers

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

Sections

.text Size: 28KB - Virtual size: 24KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 28KB - Virtual size: 24KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 6KB