9782690fe06b9bd2fb82e290ed71ec05_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9782690fe06b9bd2fb82e290ed71ec05_JaffaCakes118
Size

286KB
MD5

9782690fe06b9bd2fb82e290ed71ec05
SHA1

2e0080d332bc81b2b5bae6cd9c92d375f3f32b7d
SHA256

a8d01ab384c241aebac8035d8e318499d20cdfb51a5770cd65f3ccee61c9617f
SHA512

54391a815b1e7548237b4c625e5d6c3a39104e74e11f5d60b44adccfd3b8c6883e36408d082329cb112145aaff607b6ca00af3b6f38d8142fdcfa0f2f55ae6cf
SSDEEP

6144:wdGHi3sroMmlD0r0ZMkvhWhmbFXNVmbBaO:R80oUQKkvKmbvVmAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9782690fe06b9bd2fb82e290ed71ec05_JaffaCakes118

Files

9782690fe06b9bd2fb82e290ed71ec05_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9445783ab63d40a2144a81701244d0bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetEnvironmentStrings
GetCurrentThread
IsDebuggerPresent
GetTickCount
GetEnvironmentStringsW
GetVersionExA
GetLastError
GetProcAddress
LoadLibraryW
ExitProcess
GetStdHandle
GetModuleHandleA
GetModuleFileNameA
HeapAlloc
GetCurrentProcess
HeapFree
CloseHandle
VirtualAlloc
CompareStringW
CompareStringA
GetTimeZoneInformation
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoW
GetLocaleInfoA
MultiByteToWideChar
HeapSize
GetVersionExW
GetCommandLineA
GetProcessHeap
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapReAlloc
RtlUnwind
SetEnvironmentVariableA

ole32

CreateBindCtx
OleUninitialize
CoTaskMemAlloc
OleFlushClipboard
OleInitialize
CLSIDFromProgID
CoCreateGuid
CoCreateInstance
OleRun
CoInitialize
CoGetClassObject
RegisterDragDrop
RevokeDragDrop
CLSIDFromString
CoUninitialize
OleSaveToStream

comdlg32

GetSaveFileNameA

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9445783ab63d40a2144a81701244d0bf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

comdlg32

Sections

.text Size: 269KB - Virtual size: 268KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 6KB - Virtual size: 8KB

.text
Size: 269KB - Virtual size: 268KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 6KB - Virtual size: 8KB