JaffaCakes118_53e7f05105e6f9c22b176127a182d083

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_53e7f05105e6f9c22b176127a182d083
Size

86KB
MD5

53e7f05105e6f9c22b176127a182d083
SHA1

408f47cd823c03084cccc33d8abeb566ceef950f
SHA256

1d92331566947f3ad5de2dcb39ac517bfe04019f834a3a0550f5cbd63b01e8ae
SHA512

e00815c12f060a821cf8e935f240b88fc94c5455a8f14ddd2f2d65775d84fb4e34b306db0a75396762a2eb08d312640a2bbf71f5e7889799782c8755efbcd745
SSDEEP

1536:4lvkzvff1nEFAEvBg3Z6WimCcsPMKTlUp1XKt4747H6lNvJiFI:4lvk7fCFA+C3wPDcc/ToxkONvMF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_53e7f05105e6f9c22b176127a182d083

Files

JaffaCakes118_53e7f05105e6f9c22b176127a182d083
.exe windows:5 windows x86 arch:x86

0b7aa8abde59ca2f00625a073b848ae0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\G4be\Documents\Visual Studio 2010\Projects\stubby\Release\stubby.pdb

Imports

kernel32

CreateMutexW
GetModuleFileNameW
OpenMutexW
SetLastError
GetFileType
FindResourceA
FreeResource
LoadResource
VirtualFree
SizeofResource
GetProcAddress
VirtualAlloc
LockResource
GetModuleFileNameA
GetModuleHandleA
HeapSize
HeapReAlloc
RtlUnwind
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
GetCurrentThreadId
GetLastError
InterlockedDecrement
ExitProcess
WriteFile
GetStdHandle
HeapCreate
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
IsProcessorFeaturePresent

user32

CreateWindowExW

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b7aa8abde59ca2f00625a073b848ae0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 3KB - Virtual size: 2KB