12f06dabdbd79df1d24cec23fbd5c600_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

12f06dabdbd79df1d24cec23fbd5c600_JaffaCakes118
Size

143KB
MD5

12f06dabdbd79df1d24cec23fbd5c600
SHA1

5d66182c90c217780af55eba6bd656813fb40d9a
SHA256

87e56bc4149238402f6b802062f6c6c00d1d5476c39702cf3daeee2943d00ab9
SHA512

fccc49fda1291a1aa5e62ff665c0160b7104c749bf6bd49c0296617e7cff8c6579b4ca826e7f539dc6f34682741597ffeae3a0ddfdf9c6d266784de856f2499e
SSDEEP

1536:nmM9sgJRbZlkOm/5xx8w9MO5UnXIYdYgMehRRtSaQMbHfwHkypkxvf:nrTa1/Tx1/Un4YlMARfSaLHdGY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f06dabdbd79df1d24cec23fbd5c600_JaffaCakes118

Files

12f06dabdbd79df1d24cec23fbd5c600_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a4d2313ef5d3fcad180f82a2f9ecec03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

case0information.pdb

Imports

kernel32

GetCurrentProcess
SetConsoleWindowInfo
ProcessIdToSessionId
EnumSystemLanguageGroupsW
_lwrite
GetLargestConsoleWindowSize
GetProcessHeap
GetProcessIoCounters
WriteConsoleOutputCharacterA
GetTickCount
MoveFileExA
SetEvent
GetMailslotInfo
GlobalFree
SetInformationJobObject
BindIoCompletionCallback
PrepareTape
VirtualAlloc
GetCalendarInfoW
GetCurrencyFormatW
SetHandleCount
CompareFileTime
FindVolumeMountPointClose
lstrcpyA
GetProfileSectionW
FillConsoleOutputCharacterW
CreateThread
SetCurrentDirectoryA
FindNextVolumeMountPointA
CreateSemaphoreA
SleepEx
AssignProcessToJobObject
lstrcmpW
WriteFileGather
OpenProcess
GetWindowsDirectoryA
SetComputerNameExA
GlobalFlags
lstrcatA
ExpandEnvironmentStringsW
GetLocaleInfoW
CloseHandle
LocalFlags
lstrlenA
EnumCalendarInfoW
ExpandEnvironmentStringsW

msvcrt

memcpy
strlen

advapi32

FindFirstFreeAce
InitiateSystemShutdownExW
CreatePrivateObjectSecurityEx
CryptDeriveKey

Exports

Exports

DiskDebugExport
DiskSystrayPlug
DiskWord

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata0
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4d2313ef5d3fcad180f82a2f9ecec03

Headers

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

advapi32

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 38KB

.data Size: 9KB - Virtual size: 9KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 2KB - Virtual size: 1KB

.idata0 Size: 88KB - Virtual size: 87KB

.reloc Size: 1024B - Virtual size: 40KB

.text
Size: 39KB - Virtual size: 38KB

.data
Size: 9KB - Virtual size: 9KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 2KB - Virtual size: 1KB

.idata0
Size: 88KB - Virtual size: 87KB

.reloc
Size: 1024B - Virtual size: 40KB