687f35dad4720227f2be64cb57ef3003_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

687f35dad4720227f2be64cb57ef3003_JaffaCakes118
Size

193KB
MD5

687f35dad4720227f2be64cb57ef3003
SHA1

888976af8518ceb332f054e85723471e25fd9520
SHA256

384ea7fdb3c13393a35823806a05ccdd99aa12b39708fc9b5bcd540cde4b4620
SHA512

2771e363d2b0b91987875d2dc21c86065ebb5ecb2e8418879894b3387bc423ff1c479c6e723d642e5879b30da3be8fe28b498a9b479954c30f12c75d6305b6c2
SSDEEP

3072:U3ZcWhEYZoNPuEs3o7tj5L0qcW9FYZHEvjepNioLVtOM5r92A7:gZcgAs3HW9Gk70BLvOW93

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
687f35dad4720227f2be64cb57ef3003_JaffaCakes118

Files

687f35dad4720227f2be64cb57ef3003_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e0f8b2a80d2f206b8a04b251784031a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputCharacterW
GetCPInfo
FreeEnvironmentStringsA
LoadLibraryW
GetLastError
SetLastError
LocalAlloc
AddAtomA
FindAtomA
VirtualProtect
GetCurrentDirectoryA
FindFirstChangeNotificationW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetModuleHandleW
Sleep
GetProcAddress
GetStdHandle
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
CloseHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
HeapSize

user32

GetMessageExtraInfo
GetParent
SetParent
GetMonitorInfoA
GetUpdateRect
PeekMessageA
GetCaretPos
SetThreadDesktop
SetProcessDefaultLayout
RegisterClassExW

gdi32

SetViewportOrgEx

shell32

ExtractIconW

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0f8b2a80d2f206b8a04b251784031a8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 18KB

.rsrc Size: 41KB - Virtual size: 41KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 18KB

.rsrc
Size: 41KB - Virtual size: 41KB

.reloc
Size: 6KB - Virtual size: 6KB