01ba3f56d418cd97d6e8eed611b28ec2_JaffaCakes118

General

Target

01ba3f56d418cd97d6e8eed611b28ec2_JaffaCakes118
Size

136KB
MD5

01ba3f56d418cd97d6e8eed611b28ec2
SHA1

25dbeff9c1723288a691403e7f18a1e3b487c891
SHA256

79bbd2df590a52e734e6366b1563fdacf2b3dc33eca4beb9b4afcb90c6a8bf5b
SHA512

4af362380134893e9dbefecae9e222b9861bd965ab2334a7221d377679d1338f97b88c5b4c4a35b4f3ad0afe052afe6b7c51c81edf45b162e00ac33af132b50d
SSDEEP

3072:ptv+UnqPC3w6HmwEIMcUZVaYs3ac7v49GRtw:pUUh3dk7s3N7v4gRtw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01ba3f56d418cd97d6e8eed611b28ec2_JaffaCakes118

Files

01ba3f56d418cd97d6e8eed611b28ec2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

60c82b3fb9c83febc3af7131203a7c1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

GetTokenInformation

version

VerQueryValueW

kernel32

RtlUnwind
GetStringTypeW
GetHandleInformation
LoadLibraryA
IsValidLocale
GetModuleHandleA
GetProcAddress
CreateProcessW
GetConsoleMode
SetErrorMode
MapViewOfFile
SetLastError
GetStringTypeA
SystemTimeToFileTime
HeapCreate
SetCurrentDirectoryW
GetStartupInfoA
SetFilePointer
LoadResource
WriteConsoleW
InterlockedExchange
InitializeCriticalSection
lstrcmpW
SetThreadPriority
VirtualAlloc
ExitProcess
GetSystemTime
HeapAlloc
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
VirtualFree
HeapFree
DeleteCriticalSection
FatalAppExitA
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
CloseHandle
CreateFileA
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW

Exports

Exports

ldyqiaulqyg

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60c82b3fb9c83febc3af7131203a7c1f

Headers

File Characteristics

Imports

advapi32

version

kernel32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 52KB - Virtual size: 53KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 52KB - Virtual size: 53KB

.reloc
Size: 12KB - Virtual size: 8KB