0f7d119fb70ced647f63602c1f5df9e7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0f7d119fb70ced647f63602c1f5df9e7_JaffaCakes118
Size

313KB
MD5

0f7d119fb70ced647f63602c1f5df9e7
SHA1

b15b743012aa646336a03e209ce4d633c5350406
SHA256

a87145d31f8eb7e3ce1bf2f81dbe833b1edeb50328744d6a8cd2ddcbc1d0bd6a
SHA512

b5c9b672534557d0f5a56fc9b1df631021fa54d06ff4da2fe9f913a569e6bbf95e510bdf91e032b2e3d6675bcdf47c355969fb7cbe1ec8314624e0657af1c963
SSDEEP

6144:YXVJ/C+niWpdNXVSs38lD1T006opQcVse:6JNppHlF38lllScye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f7d119fb70ced647f63602c1f5df9e7_JaffaCakes118

Files

0f7d119fb70ced647f63602c1f5df9e7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d349414f8a497da10bbd5c6e2f297717

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetProcessAffinityMask
GlobalMemoryStatus
GetCurrentProcess
CompareFileTime
GetModuleHandleW
GetTickCount
GetProcessTimes
TerminateThread
FileTimeToSystemTime
SetComputerNameExW
lstrcatA
GetStdHandle
GetLastError
SetLastError
GetProcAddress
GetProcessWorkingSetSize
LocalAlloc
AddAtomA
OpenJobObjectW
SetCommMask
GetProcessShutdownParameters
GetProcessAffinityMask
CloseHandle
GetCurrentProcessId
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapFree
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineA
RaiseException
RtlUnwind
IsProcessorFeaturePresent
GetProcessHeap
HeapAlloc
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetCurrentThread
GetCurrentThreadId
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateSemaphoreW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
OutputDebugStringW
GetStringTypeW
CreateFileW

user32

PeekMessageW
PostMessageA
CopyImage

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mysec
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d349414f8a497da10bbd5c6e2f297717

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 133KB - Virtual size: 133KB

.rdata Size: 35KB - Virtual size: 35KB

.data Size: 69KB - Virtual size: 100KB

.mysec Size: 1024B - Virtual size: 4KB

.rsrc Size: 65KB - Virtual size: 64KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 133KB - Virtual size: 133KB

.rdata
Size: 35KB - Virtual size: 35KB

.data
Size: 69KB - Virtual size: 100KB

.mysec
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 65KB - Virtual size: 64KB

.reloc
Size: 8KB - Virtual size: 7KB