3f42de3c2e753a158052233e96508cc7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3f42de3c2e753a158052233e96508cc7_JaffaCakes118
Size

1.4MB
MD5

3f42de3c2e753a158052233e96508cc7
SHA1

c7d0a3eaa9f557e3039c098a5343ddb6011326b5
SHA256

9dffba988ba4b2434ae7b12a4824de68a4031612b80a9ff34841ebc9726ecdd8
SHA512

82585854895215a8f55c007137d9d6216c9b9c92305cb9c2e22ee357fdf73c2d7bccf043ba262bfeb50af4543ea54fb7ef7a47ed78f9c86dd1d9751cf449f10c
SSDEEP

24576:0IscU/YVFYmhyV+n8zkjxHV73K5KlsGSoymrcNrvOtGBbst:0VZaFjbTabvna

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f42de3c2e753a158052233e96508cc7_JaffaCakes118

Files

3f42de3c2e753a158052233e96508cc7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d12622eba8dd788f1ce17e7153aca199

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GlobalFree
VirtualAlloc
ExitProcess
GetCurrentThreadId
GetLastError
EnterCriticalSection
SetHandleCount
WriteFile
CloseHandle
GetSystemInfo
FileTimeToSystemTime
GetModuleHandleW
GetTempPathW
GetFullPathNameW
GetLocaleInfoW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
GetStringTypeW
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
IsProcessorFeaturePresent
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapFree
LeaveCriticalSection
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateFileW

psapi

GetDeviceDriverBaseNameW

shlwapi

StrChrW
StrChrIW
StrCmpNW
SHDeleteKeyW
UrlUnescapeW
UrlCanonicalizeW
PathStripToRootW
PathStripPathW
PathRemoveBlanksW
PathRemoveBackslashW
PathIsURLW
PathIsUNCServerW
PathIsRootW
PathIsRelativeW
PathIsDirectoryW
PathFindNextComponentW
PathFindFileNameW
PathAddBackslashW
StrCmpW
StrToIntExW
StrStrIW
StrDupW

wininet

InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpQueryInfoW
InternetCrackUrlW

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 991KB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 362KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d12622eba8dd788f1ce17e7153aca199

Headers

File Characteristics

Imports

kernel32

psapi

shlwapi

wininet

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 991KB - Virtual size: 7.4MB

.rsrc Size: 362KB - Virtual size: 361KB

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 991KB - Virtual size: 7.4MB

.rsrc
Size: 362KB - Virtual size: 361KB