94dea126ab5c2dc5265c433c9508ccac_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

94dea126ab5c2dc5265c433c9508ccac_JaffaCakes118
Size

5.6MB
MD5

94dea126ab5c2dc5265c433c9508ccac
SHA1

1d08e67b922520346b1d06814f10ca1031e717a8
SHA256

02c38fee49dbe39590ef6c991b25a2ef0572e236cd2aa41455a3390348094f48
SHA512

8b64f94cd944aab98fb36fc0963f6f0193d7af39acbe4034d403d3ae60866d644c962ae4f460981d0c17882c6a911aad620daecfc2cad67001634847b9fcc9fd
SSDEEP

98304:QounyTJch1cEtCeyqavi7YKQJwr8asC3pkDyBrEAFGIM8pAS4h:Qtcc/yxfw5dQyBrEiGIbASo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94dea126ab5c2dc5265c433c9508ccac_JaffaCakes118

Files

94dea126ab5c2dc5265c433c9508ccac_JaffaCakes118
.exe windows:6 windows x86 arch:x86

e858930dd08545fbf772619bbde262c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

PostQuitMessage
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW

advapi32

CryptDestroyHash

shell32

ShellExecuteA

msvcp140

?getloc@ios_base@std@@QBE?AVlocale@2@XZ

wininet

InternetConnectA

imm32

ImmSetCompositionWindow

d3d9

Direct3DCreate9

vcruntime140

_purecall

api-ms-win-crt-stdio-l1-1-0

__p__commode

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-math-l1-1-0

_libm_sse2_cos_precise

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-filesystem-l1-1-0

_lock_file

api-ms-win-crt-runtime-l1-1-0

terminate

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64

wtsapi32

WTSSendMessageW

Sections

kr5vy"sT
Size: - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

xcntzhEj
Size: - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

G#\lEf`]
Size: - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

O$y2%VLy
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

)+&OaV^N
Size: - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

F'o^D*/a
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

W[a5**+i
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

m-Av;m"e
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e858930dd08545fbf772619bbde262c0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcp140

wininet

imm32

d3d9

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

wtsapi32

Sections

kr5vy"sT Size: - Virtual size: 253KB

xcntzhEj Size: - Virtual size: 142KB

G#\lEf`] Size: - Virtual size: 223KB

O$y2%VLy Size: - Virtual size: 1KB

)+&OaV^N Size: - Virtual size: 3.2MB

F'o^D*/a Size: 5.6MB - Virtual size: 5.6MB

W[a5**+i Size: 1KB - Virtual size: 1KB

m-Av;m"e Size: 512B - Virtual size: 469B

kr5vy"sT
Size: - Virtual size: 253KB

xcntzhEj
Size: - Virtual size: 142KB

G#\lEf`]
Size: - Virtual size: 223KB

O$y2%VLy
Size: - Virtual size: 1KB

)+&OaV^N
Size: - Virtual size: 3.2MB

F'o^D*/a
Size: 5.6MB - Virtual size: 5.6MB

W[a5**+i
Size: 1KB - Virtual size: 1KB

m-Av;m"e
Size: 512B - Virtual size: 469B