48f7efd2f343bdd050cb23d3f9180a8e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

48f7efd2f343bdd050cb23d3f9180a8e_JaffaCakes118
Size

455KB
MD5

48f7efd2f343bdd050cb23d3f9180a8e
SHA1

d3dae9aade87fcd3324fcff97d951ea5ae512b5b
SHA256

d210d7f79135d554ec4ea11a3e193e8bb05e6941598c99c59705bcb3068898d1
SHA512

77ec6adb21a9148065d2dfda65aaac2acd814ecffcaade9cf2038180f88b3915f1163e327d40ad69ceab74f847b15864349c8aab7c8881d57df8d022384476f6
SSDEEP

6144:pk69oa2DnZot8e/toa/YhFdNtH9dXfZNJIYb9eHg1jgw:pF72DnOt1NQH9dXRgw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48f7efd2f343bdd050cb23d3f9180a8e_JaffaCakes118

Files

48f7efd2f343bdd050cb23d3f9180a8e_JaffaCakes118
.exe windows:6 windows x86 arch:x86

0a7b9174e85c867786f3f041a7b09b0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\place\Method\must\originalback.pdb

Imports

kernel32

FlushFileBuffers
OutputDebugStringW
GetStringTypeW
GetConsoleCP
LoadLibraryExW
LeaveCriticalSection
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
GetVolumeInformationA
GetWindowsDirectoryA
TlsAlloc
Sleep
EnterCriticalSection
InitializeCriticalSection
HeapReAlloc
VirtualProtect
LCMapStringW
CompareStringW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
CreateFileW

user32

GetMessageA
TranslateMessage
UnregisterHotKey
RegisterWindowMessageA
LoadIconA
OffsetRect
CreateMenu
SetCapture
CloseClipboard
EndDialog
DeferWindowPos
BeginDeferWindowPos
ShowWindow

gdi32

GetPixel
CreateRectRgn
CreateFontA
CreateCompatibleDC
SelectClipRgn

comctl32

ImageList_Draw
ImageList_DragMove
ImageList_ReplaceIcon

comdlg32

GetOpenFileNameA
GetSaveFileNameA
FindTextA

shlwapi

PathRemoveBlanksA
PathStripPathA
UrlEscapeA
PathRemoveBackslashA

lz32

LZStart
LZDone
LZInit
LZSeek

mgmtapi

SnmpMgrCtl
SnmpMgrClose
SnmpMgrRequest
SnmpMgrOpen

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a7b9174e85c867786f3f041a7b09b0e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comctl32

comdlg32

shlwapi

lz32

mgmtapi

Sections

.text Size: 248KB - Virtual size: 247KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 5KB - Virtual size: 35KB

.rsrc Size: 163KB - Virtual size: 163KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 248KB - Virtual size: 247KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 5KB - Virtual size: 35KB

.rsrc
Size: 163KB - Virtual size: 163KB

.reloc
Size: 6KB - Virtual size: 6KB