53ce5878db220cb53da735dcd5294a8b_JaffaCakes118

General

Target

53ce5878db220cb53da735dcd5294a8b_JaffaCakes118
Size

128KB
MD5

53ce5878db220cb53da735dcd5294a8b
SHA1

7b6bdbf08c0c7a046cfd8730d31af8262ca6a962
SHA256

f8120bfb592f9e2e52d3b3a703e5b99d3a37b1b8b3143f050e6fed267137bf59
SHA512

59b36692377118f75db703cfc231a3d75d80ad2b85f610b4a0518f56de3f2a300581185aa4997b1396f0766ff78d1100bbfa5c0613c7d3abd50d6d6837e6f9e2
SSDEEP

3072:Q+QaGnJg9CXo8HFEdNiAJoLeJYPy7jUy:QX7nGsEd79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53ce5878db220cb53da735dcd5294a8b_JaffaCakes118

Files

53ce5878db220cb53da735dcd5294a8b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

036483836c6b4b4ce54c38cdf83d003c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
RtlUnwind
GetProcAddress
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetFilePointer
CloseHandle
SetStdHandle

Exports

Exports

FLT_Do
FLT_GetErrMsg
FLT_GetOutputBufSize
FLT_Init
FLT_Term

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

036483836c6b4b4ce54c38cdf83d003c

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 72KB - Virtual size: 75KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 72KB - Virtual size: 75KB

.reloc
Size: 4KB - Virtual size: 3KB