247561b589c4782b641e57340353a81e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

247561b589c4782b641e57340353a81e_JaffaCakes118
Size

258KB
MD5

247561b589c4782b641e57340353a81e
SHA1

b85ff62a3aaa3af47579d73728aa1a6fad333352
SHA256

47b9d1ab5a3a085a31beadf01edda5a96d57b092430bfea60feef89a834f94ce
SHA512

9db0806aeec3c27f432fe55979ade52a94185db95056f8d04c556d058e2b1e37f3e6c02b33c1d6de7e874752b4a2f97c812a42b769730706931c5523d418b12b
SSDEEP

6144:zU/1INuWepwjnTk4v0ybEGSz+z8Tyhxoco0rys2xrf:g/1INuWepGkaf8PkysGf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
247561b589c4782b641e57340353a81e_JaffaCakes118

Files

247561b589c4782b641e57340353a81e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

df8fbcfbe7758f169b588e4c561c82ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
SizeofResource
MultiByteToWideChar
InterlockedIncrement
LockResource
GetConsoleWindow
LoadResource
FindResourceW
lstrlenW
CreateFileMappingA
MapViewOfFile
GetSystemInfo
UnmapViewOfFile
VirtualAlloc
GetProcessHeap
lstrlenA
GetLastError
HeapValidate
IsBadReadPtr
GetModuleFileNameW
GetCommandLineA
HeapSetInformation
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
GetProcAddress
GetModuleHandleW
SetLastError
GetCurrentThread
RaiseException
HeapAlloc
GetModuleFileNameA
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
HeapCreate
HeapDestroy
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
ExitProcess
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoW
RtlUnwind
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
CreateFileW
CloseHandle
FlushFileBuffers
SetEvent
OpenEventA
FindResourceExW

user32

ShowWindow
MessageBoxW

ole32

CoCreateInstance
CLSIDFromProgID
CoUninitialize
CoInitializeEx

oleaut32

SysFreeString
SysAllocString

advapi32

RevertToSelf
OpenThreadToken
SetThreadToken

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df8fbcfbe7758f169b588e4c561c82ae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 92KB - Virtual size: 99KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 92KB - Virtual size: 99KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 12KB - Virtual size: 12KB