14c1fdc8ad9861daa14913e085efa4f3_JaffaCakes118

General

Target

14c1fdc8ad9861daa14913e085efa4f3_JaffaCakes118
Size

1.1MB
MD5

14c1fdc8ad9861daa14913e085efa4f3
SHA1

5a477cf8d71e0710e993dff7411e8367b3383cba
SHA256

3e929f44aee1c608e1f63a8868c45bc5c8051c404a62cfc6b6795b4b6484619a
SHA512

c6d565a7fc34495ebda71965267e195f42662713aa2112a52f5c467f6f27ed6a36a3f0a53c3ef5958699a864c5fbf12223bed67bff04e6617ff76cec8d01a0c8
SSDEEP

24576:etK4SvD5PUeMxtlYyCPFdvmyhkaOu86bDqIObqoN2euw9:e1SvD59MuyCPFdvxkdu86Xq/mPw9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c1fdc8ad9861daa14913e085efa4f3_JaffaCakes118

Files

14c1fdc8ad9861daa14913e085efa4f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15b9549097e6154d2f4ecfb0183a5df1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
GetVersionExA
DisableThreadLibraryCalls
UnhandledExceptionFilter
IsDebuggerPresent
WaitForSingleObject
SystemTimeToTzSpecificLocalTime
SetEvent
ReleaseMutex
GetProcAddress
GetAtomNameA
FileTimeToSystemTime
CreateMutexA
CreateEventA
VirtualAlloc
AddAtomA
WideCharToMultiByte
VirtualQuery
TlsGetValue
Sleep
QueryPerformanceCounter
MultiByteToWideChar
LoadLibraryA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetModuleHandleA
GetLastError
FreeLibrary
DeleteCriticalSection
CreateFileA
WriteFile
DeleteFileA
RemoveDirectoryA
CloseHandle
lstrcmpiW

advapi32

RegOpenKeyExA
OpenProcessToken

msvcrt

exit
time
strrchr
strncpy
sscanf
mktime
memset
localtime
gmtime
asctime
strlen
strerror
strcpy
strcmp
strchr
malloc
getenv
fwrite
free
fclose
calloc
abort
strtoul
isprint
printf

crypt32

CertGetPublicKeyLength
CertFreeCertificateContext

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15b9549097e6154d2f4ecfb0183a5df1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcrt

crypt32

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 32KB - Virtual size: 2.2MB

.rsrc Size: 28KB - Virtual size: 26KB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 32KB - Virtual size: 2.2MB

.rsrc
Size: 28KB - Virtual size: 26KB