54462767c1154b5ecee3677ee34f4ad3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

54462767c1154b5ecee3677ee34f4ad3_JaffaCakes118
Size

300KB
MD5

54462767c1154b5ecee3677ee34f4ad3
SHA1

c060a5c845d4aae733c1ec1a396720ec1c8430bd
SHA256

719af53202f09d7a100a589ed11d939c203b0c49354c58fd9c1ecfa52363dac1
SHA512

bbef394883baadf47ef37f559ec7dd69c6bbdf8006f362d0a7d55f4ee478188ce6554bbf090b19ceb5cf2461a4e0e75c4c635e83df0190a2f7d5fde08be558f2
SSDEEP

3072:GEo87Rb+rTdu0e0aKvEHUMnvUNVb8hANwrKjzTIlMS0:GYtGJsQEHk5DNoQzpS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54462767c1154b5ecee3677ee34f4ad3_JaffaCakes118

Files

54462767c1154b5ecee3677ee34f4ad3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2b405e6c63c53eb3a4761753f628d485

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
Sleep
CreateProcessA
SetEndOfFile
GetModuleFileNameA
GetCurrentProcess
GetVersionExA
GetLastError
GetSystemDirectoryA
CloseHandle
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
HeapReAlloc
HeapAlloc
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetFilePointer
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

advapi32

GetTokenInformation
RegQueryValueExA
RegCloseKey
OpenProcessToken

setupapi

SetupDiGetDeviceInstanceIdA
SetupDiGetSelectedDriverA
SetupDiGetDriverInfoDetailA
SetupDiOpenDevRegKey

Exports

Exports

CoDeviceInstall

Sections

.text
Size: 268KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b405e6c63c53eb3a4761753f628d485

Headers

File Characteristics

Imports

kernel32

advapi32

setupapi

Exports

Exports

Sections

.text Size: 268KB - Virtual size: 270KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 268KB - Virtual size: 270KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB