2646f7159e1723f089d63e08c8bfaffb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2646f7159e1723f089d63e08c8bfaffb_JaffaCakes118
Size

213KB
MD5

2646f7159e1723f089d63e08c8bfaffb
SHA1

48904399f7726b9adf7f28c07b0599717f741b8b
SHA256

340b09d661a6ac45af53c348a5c1846ad6323d34311e66454e46c1d38d53af8b
SHA512

611c75a9de4c927e9aaebaaba1f98d69592cd5bd7a9c3f19c8a489c4eff35ccaa8f176330efffef74658d10da2846ba3fdc8aa0384e86605ac7a148c64e4ffe2
SSDEEP

3072:G7Jip5RnDaFjYVKwi6ZgQKF3k3tTZLrHsB9IS3g2votecMO9XLyP8ZJmtdZ9S24W:Ka5RnQjYVKb6Zd3B5Hsjpf8vO22pmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2646f7159e1723f089d63e08c8bfaffb_JaffaCakes118

Files

2646f7159e1723f089d63e08c8bfaffb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7d49c6380096d9d2548dbf3bb120d2ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathA

user32

RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DefWindowProcA
MessageBoxA
EnumDisplayDevicesA
GetDC
ReleaseDC
DispatchMessageA

kernel32

GetLocaleInfoA
GetUserDefaultLCID
FlushFileBuffers
CreateFileW
HeapSize
HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
RtlUnwind
EnumSystemLocalesA
GetLastError
GetProcAddress
LoadLibraryA
ResumeThread
CreateProcessA
ExitProcess
CopyFileA
GetModuleFileNameA
CloseHandle
VirtualAlloc
VirtualFree
SetLastError
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
IsValidLocale
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapAlloc
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
CompareStringW
MultiByteToWideChar
SetEnvironmentVariableA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW

gdi32

CreateDCA

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d49c6380096d9d2548dbf3bb120d2ee

Headers

DLL Characteristics

File Characteristics

Imports

shell32

user32

kernel32

gdi32

Sections

.text Size: 80KB - Virtual size: 80KB

.data Size: 91KB - Virtual size: 90KB

.pdata Size: 33KB - Virtual size: 32KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 80KB - Virtual size: 80KB

.data
Size: 91KB - Virtual size: 90KB

.pdata
Size: 33KB - Virtual size: 32KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB