a1b89128ef26396399f8e888cef53682_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a1b89128ef26396399f8e888cef53682_JaffaCakes118
Size

3.9MB
MD5

a1b89128ef26396399f8e888cef53682
SHA1

1b9f242b904edbe933596fb465f5a54e16e88d24
SHA256

55e1604ebd4d5a0a9ccb6d4a7fd2ce4b5c1f75f9e2ac2710cf0698bac42c6679
SHA512

e0cbba359ab32670aa0dd8e486963c5855dc8908ae42940a1cc8547b8d208d35a42ecca2df5212fe5520f21f73337f35814f291e9131d5d7ab19dd952f966b0f
SSDEEP

98304:Nhr0+rvyewVzbxC1C+xxRaqW71ycye9cMnLuWI2/vz:Nhg4UxupSDRFnz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1b89128ef26396399f8e888cef53682_JaffaCakes118

Files

a1b89128ef26396399f8e888cef53682_JaffaCakes118
.exe windows:5 windows x86 arch:x86

51f48be74b189cf13e5c38405c3b2455

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrencyFormatW
GetLocaleInfoW
Sleep
FormatMessageW
GetFileAttributesW
CreateFileW
lstrlenW
LCMapStringA
FindFirstFileExA
GetLastError
GetDriveTypeA
GetPrivateProfileStringA
RegisterWaitForSingleObject
OpenWaitableTimerW
LocalAlloc
CreateHardLinkW
TransmitCommChar
RemoveDirectoryW
GetModuleHandleA
GetPrivateProfileSectionW
WriteFile
GetModuleHandleW
GetNamedPipeHandleStateA
GetCurrentProcess
IsBadStringPtrW
FindResourceA
GetProcAddress
UnregisterWait
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
HeapSize
GetLocaleInfoA
HeapAlloc
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA

advapi32

LookupAccountNameW

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tel
Size: 14KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51f48be74b189cf13e5c38405c3b2455

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.data Size: 70KB - Virtual size: 4.5MB

.tel Size: 14KB - Virtual size: 18KB

.rsrc Size: 84KB - Virtual size: 83KB

.text
Size: 3.7MB - Virtual size: 3.7MB

.data
Size: 70KB - Virtual size: 4.5MB

.tel
Size: 14KB - Virtual size: 18KB

.rsrc
Size: 84KB - Virtual size: 83KB