f7a60e6372f2f6bcd42f4ccd175d9011_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f7a60e6372f2f6bcd42f4ccd175d9011_JaffaCakes118
Size

155KB
MD5

f7a60e6372f2f6bcd42f4ccd175d9011
SHA1

840467ae8e6f80c46671f7c12c91444eb848c940
SHA256

6e48eae9fcdfdf25a7232cc69e4c40986b8d6788099b2d61f1a32f1f955b12fb
SHA512

f4d5fee3a88de78332be7b382f60603be3a05916fb931735ec85249517bc989305fb4c31b2800483e5a2de4af297a62072552f929913724d6cd76bdd4e2dbeb0
SSDEEP

3072:g9FrTY6fNx0XWXMdA1JFRWmMdybBS29Csg34qDbbHWtBOklWayZNACilJxStVPO0:g9FXY23v71JFeyVz9MZDXHWHRC9qnS3V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/java_distrib.exe

Files

f7a60e6372f2f6bcd42f4ccd175d9011_JaffaCakes118
.zip
java_distrib.exe
.exe windows:4 windows x86 arch:x86

ed54141024cafda6344b561cab46eab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
SetFilePointerEx
GetSystemTimeAsFileTime
CompareStringW
FindFirstFileA
ExpandEnvironmentStringsW
SystemTimeToFileTime
GetSystemTime
SetFileTime
SetEndOfFile
WriteFile
LocalFree
lstrlenA
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetFileSizeEx
FindClose
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GlobalFree
GlobalAlloc
GetFileAttributesExW
CopyFileW
CreateHardLinkW
SetFileAttributesW
DeleteFileW
GetTempPathA
GetFileTime
FindNextFileW
GetStdHandle
GetCurrentThread
RemoveDirectoryW
FormatMessageA
GetComputerNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
HeapReAlloc
RtlUnwind
GetLocaleInfoA
HeapSize
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

user32

PeekMessageW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

ole32

StgOpenStorageEx

oleaut32

GetActiveObject
SafeArrayGetRecordInfo
VarUI1FromDec
VariantInit

Sections

.text
Size: 79KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed54141024cafda6344b561cab46eab3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 79KB - Virtual size: 115KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 70KB - Virtual size: 69KB

.reloc Size: 512B - Virtual size: 320B

.text
Size: 79KB - Virtual size: 115KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 70KB - Virtual size: 69KB

.reloc
Size: 512B - Virtual size: 320B