82fcee092b605521ad84765368975204_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

82fcee092b605521ad84765368975204_JaffaCakes118
Size

240KB
MD5

82fcee092b605521ad84765368975204
SHA1

6c6247c06c4924bb6a3a0745551a622948fdb35e
SHA256

6f0c43533bca3f99699a76fcdce14e7a87290aa035e8da9180ffcfb483810e78
SHA512

8dc9755d7d81f9c14c3a5abafc38f3bc405940ca6ee94ed48a0bed1c6bdb46056f004f4a728ad333afbab1bc030cad59e1bc83a6b41a87477db65cc437865897
SSDEEP

6144:s7lDAB0NEKts6sUnmWpe6vTgJQ/5867T3EovpVAN9DaYVEuBOCBuWNmT2KIZOi7e:0l0B0WKtsnWprTV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82fcee092b605521ad84765368975204_JaffaCakes118

Files

82fcee092b605521ad84765368975204_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbd7e9f8b2119545200183c9a6e2ba6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

SetFileSecurityW

kernel32

CloseHandle
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
fputc
fputs
free
fwrite
malloc
memcmp
memcpy
realloc
signal
sprintf
strcmp
vfprintf

shell32

CommandLineToArgvW

Exports

Exports

ZNqzXGGsvwLm

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 184B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cbd7e9f8b2119545200183c9a6e2ba6e

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 80KB

.data Size: 19KB - Virtual size: 18KB

.rdata Size: 9KB - Virtual size: 8KB

.eh_fram Size: 11KB - Virtual size: 10KB

.bss Size: - Virtual size: 184B

.edata Size: 512B - Virtual size: 74B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 68KB - Virtual size: 67KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 80KB - Virtual size: 80KB

.data
Size: 19KB - Virtual size: 18KB

.rdata
Size: 9KB - Virtual size: 8KB

.eh_fram
Size: 11KB - Virtual size: 10KB

.bss
Size: - Virtual size: 184B

.edata
Size: 512B - Virtual size: 74B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 4KB - Virtual size: 4KB