06dd8ea6f4f8ffdcc99008c1cd8e6498_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

06dd8ea6f4f8ffdcc99008c1cd8e6498_JaffaCakes118
Size

224KB
MD5

06dd8ea6f4f8ffdcc99008c1cd8e6498
SHA1

911bdec7165294b98d6f7fa7b6bc05d1eab2a0fc
SHA256

b1753544721fb7015aac808c628e3c4f74285a8963815213ead5cb39eaa410a7
SHA512

c69d1c5da2d7ddfde91160502954f990ad6cc7e224078cf1d08c1d49a6984290b0874ba5ddd1ab4a839c68056763e81159a44b8c26183285d1f320c1513ddcc6
SSDEEP

6144:F2uaZxdmA/wpGViieiiVWPM3sCZK59ViK+iEl9z2NG:FvaZnhwpEiieiiVkasCZbSY9N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06dd8ea6f4f8ffdcc99008c1cd8e6498_JaffaCakes118

Files

06dd8ea6f4f8ffdcc99008c1cd8e6498_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73ec795c6c369c6ce2c3b4c3f6477daa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 54KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

6
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

7
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

8
Size: 46KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

10
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

73ec795c6c369c6ce2c3b4c3f6477daa

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 54KB - Virtual size: 98KB

1 Size: 6KB - Virtual size: 5KB

2 Size: - Virtual size: 10KB

3 Size: 1KB - Virtual size: 2KB

4 Size: - Virtual size: 12B

5 Size: 512B - Virtual size: 24B

6 Size: - Virtual size: 7KB

7 Size: 105KB - Virtual size: 104KB

8 Size: 46KB - Virtual size: 71KB

9 Size: 3KB - Virtual size: 3KB

10 Size: 7KB - Virtual size: 28KB

0
Size: 54KB - Virtual size: 98KB

1
Size: 6KB - Virtual size: 5KB

2
Size: - Virtual size: 10KB

3
Size: 1KB - Virtual size: 2KB

4
Size: - Virtual size: 12B

5
Size: 512B - Virtual size: 24B

6
Size: - Virtual size: 7KB

7
Size: 105KB - Virtual size: 104KB

8
Size: 46KB - Virtual size: 71KB

9
Size: 3KB - Virtual size: 3KB

10
Size: 7KB - Virtual size: 28KB