0956efec3d1dfc727b03945554f68b70_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0956efec3d1dfc727b03945554f68b70_JaffaCakes118
Size

5.3MB
MD5

0956efec3d1dfc727b03945554f68b70
SHA1

49fa7d9c90cc5a105827519402b96b8179cd1d0a
SHA256

fea1ca79b50a6b12b20e14817851bf72ab9fd2c21d037ce3a14db743d79e888d
SHA512

4b0569eb7483c25500dca94f1bd60657142fc1dd633082c986f4b16a4e524981454608a57a66c32df87e1f1306f9db469a3569aaf87037eb355c44729378f5d6
SSDEEP

98304:vg03NtVAzIn3RBWl+/ede1CqIKkoVduibh/AcgPmm9fsZ7GhzGPVCOeF065IVu:vN9AzI3RBYrCPI5oVduxcM59kxG5GP8V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0956efec3d1dfc727b03945554f68b70_JaffaCakes118

Files

0956efec3d1dfc727b03945554f68b70_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1df22a66f869319c03ce9f92cf45361d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

PDB Paths

C:\projects\tcrypt_cl2\tcrypt_cl2\Release\s_high.pdb

Imports

rpcrt4

UuidToStringW
UuidCreate

kernel32

VirtualAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateFiber
lstrlenA
QueryPerformanceCounter
GetTickCount
GetCurrentThread
VirtualFree
GetProcessHeap
LoadLibraryW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
HeapQueryInformation
ExitThread
GetProcAddress
IsDebuggerPresent
EnterCriticalSection
GetLocalTime
GlobalMemoryStatusEx
GetSystemInfo
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentProcess
TerminateProcess
RtlUnwind

user32

IsGUIThread
GetForegroundWindow

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1df22a66f869319c03ce9f92cf45361d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

kernel32

user32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 904B

.bss Size: 1KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 21B

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 512B - Virtual size: 1.7MB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 904B

.bss
Size: 1KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 21B

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 512B - Virtual size: 1.7MB