6018146e54e87da903f57c680c7020ea_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6018146e54e87da903f57c680c7020ea_JaffaCakes118
Size

6.0MB
MD5

6018146e54e87da903f57c680c7020ea
SHA1

1a01e346efdd7e07cb1a76c6486eff8002eaee65
SHA256

b1d1df4dfdd3d46fcd1f7ce52e91ed346955bb7c1cbb4e9bc9b7d0542436ea82
SHA512

18efdc9d85e57c36de2e452a2c92eaa039b4cbc0312f4103bc0042797a6da3cd1fb741a333847516fafc21f6c1f50016aa571cfb4680fa9aa988d3577b7f888e
SSDEEP

49152:JPaGeGYUbPIgTklrfJhc9R7pUhXfN2kK9THrcfebW+D7GS8tGlJTlI/KZ2AbXKx/:AgTkl2XKUJ6i0Ja+D5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6018146e54e87da903f57c680c7020ea_JaffaCakes118

Files

6018146e54e87da903f57c680c7020ea_JaffaCakes118
.exe windows:4 windows x64 arch:x64

ef4a171a2873b0c2d23dc45a75acfd32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateEventA
CreateSemaphoreW
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetConsoleMode
GetConsoleTitleA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetNumaHighestNodeNumber
GetNumaNodeProcessorMaskEx
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
InitializeConditionVariable
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleTitleA
SetEvent
SetLastError
SetThreadGroupAffinity
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
__C_specific_handler

msvcrt

___lc_codepage_func
__argv
__dllonexit
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_aligned_free
_aligned_malloc
_amsg_exit
_cexit
_errno
_filelengthi64
_fileno
_fmode
_fstat64
_ftime64
_initterm
_localtime64
_lock
_lseeki64
_onexit
_pclose
_popen
_stricmp
_strnicmp
_time64
_unlock
_wfopen
_wrename
_write
_wunlink
abort
atoi
calloc
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fscanf
fseek
fsetpos
ftell
fwrite
getc
getenv
getwc
islower
isspace
isupper
iswctype
isxdigit
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
puts
putwc
realloc
setlocale
setvbuf
signal
sprintf
strcat
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncmp
strncpy
strrchr
strspn
strstr
strtol
strtoul
strxfrm
tolower
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
_write
_strdup
_setmode
_read
_fileno
_fdopen

shell32

CommandLineToArgvW

Exports

Exports

x265_api_get_113
x265_api_query
x265_build_info_str
x265_cleanup
x265_csvlog_encode
x265_csvlog_frame
x265_csvlog_open
x265_dither_image
x265_encoder_close
x265_encoder_encode
x265_encoder_get_stats
x265_encoder_headers
x265_encoder_intra_refresh
x265_encoder_log
x265_encoder_open_113
x265_encoder_parameters
x265_encoder_reconfig
x265_max_bit_depth
x265_param_alloc
x265_param_apply_profile
x265_param_default
x265_param_default_preset
x265_param_free
x265_param_parse
x265_picture_alloc
x265_picture_free
x265_picture_init
x265_version_str

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef4a171a2873b0c2d23dc45a75acfd32

Headers

File Characteristics

Imports

kernel32

msvcrt

shell32

Exports

Exports

Sections

.text Size: 5.6MB - Virtual size: 5.6MB

.data Size: 16KB - Virtual size: 15KB

.rdata Size: 194KB - Virtual size: 194KB

.rodata Size: 15KB - Virtual size: 14KB

.pdata Size: 63KB - Virtual size: 62KB

.xdata Size: 100KB - Virtual size: 100KB

.bss Size: - Virtual size: 24KB

.edata Size: 1024B - Virtual size: 872B

.idata Size: 6KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 104B

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 5.6MB - Virtual size: 5.6MB

.data
Size: 16KB - Virtual size: 15KB

.rdata
Size: 194KB - Virtual size: 194KB

.rodata
Size: 15KB - Virtual size: 14KB

.pdata
Size: 63KB - Virtual size: 62KB

.xdata
Size: 100KB - Virtual size: 100KB

.bss
Size: - Virtual size: 24KB

.edata
Size: 1024B - Virtual size: 872B

.idata
Size: 6KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 104B

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 11KB - Virtual size: 11KB