7135ffc132104c1e9e641628c83ffeb9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7135ffc132104c1e9e641628c83ffeb9_JaffaCakes118
Size

210KB
MD5

7135ffc132104c1e9e641628c83ffeb9
SHA1

8a2cb8da0d56d3d0499505d1f839cfcf02610fa0
SHA256

9eb9e56334ebaa7d666ce954e87d62327be12475faebe5f2d19780baad6a768c
SHA512

ebcfc75902fc448b766c550b43c7610758dffda551d7674d348b796bf50288911fb07161e6536c788b50127a4a76e5e2f85bcac456d8352cf2f6f9f30e967f86
SSDEEP

3072:/Al2HtifWeCKXEA1KMNkrFlqJkCxeYbgsYrpM24vCnm9uxnd+2XPBNKHAvZ:/22NKC5A1xyr3AkYF8hpYvEm9IJAA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7135ffc132104c1e9e641628c83ffeb9_JaffaCakes118

Files

7135ffc132104c1e9e641628c83ffeb9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6e658a26bfc613fc9ae3b843eae183fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetThreadSelectorEntry
FillConsoleOutputCharacterW
GetLastError
GetCurrentDirectoryW
GetProcAddress
VirtualAlloc
FindNextChangeNotification
AddAtomA
GetTickCount
SetProcessShutdownParameters
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
FatalExit
WriteConsoleOutputCharacterA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
ReadFile
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetLocaleInfoW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
CreateFileW

user32

GetNextDlgTabItem
GetMessageA
RealGetWindowClassW
GetAltTabInfoA
GetMenuState
DefDlgProcA
GetDlgCtrlID

advapi32

ReportEventW

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e658a26bfc613fc9ae3b843eae183fb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 162KB - Virtual size: 162KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 9KB - Virtual size: 21KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 162KB - Virtual size: 162KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 9KB - Virtual size: 21KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 8KB - Virtual size: 8KB