a8f57a228fffb58e0d1f82deca5fc451_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a8f57a228fffb58e0d1f82deca5fc451_JaffaCakes118
Size

829KB
MD5

a8f57a228fffb58e0d1f82deca5fc451
SHA1

f4a25f5bf2537e35b4ff6c55b12b10f597f83c76
SHA256

f2756e954bee7a1093778b0fa14492140327749f026975338b5bc458dbb1b567
SHA512

50fd53a5d1ff137b6daa18ca8679849e27539eafacab086e2cf927d06288f012343509a1e8646d89b91148c256b2789d6a426eb4511350865539e6321e41b6e9
SSDEEP

24576:VcbwFLrpaWAkAD6xCGJjAmSKt26J6N+V4OAs0:hLrgWG6AGGmSKt26J6N+VZx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8f57a228fffb58e0d1f82deca5fc451_JaffaCakes118

Files

a8f57a228fffb58e0d1f82deca5fc451_JaffaCakes118
.exe windows:5 windows x86 arch:x86

12a2b270b6c4f2b622a350c4164d942e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CertAddEncodedCertificateToStore
CertAddCertificateContextToStore
CertGetPublicKeyLength
CertVerifyTimeValidity
CryptQueryObject
CryptStringToBinaryW
CertFreeCertificateContext

oleaut32

SafeArrayPutElement
VariantChangeTypeEx
VarI4FromStr
VarBstrFromBool
VarBoolFromStr
SafeArrayGetElement
SafeArrayUnaccessData
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex

kernel32

CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
VirtualAlloc
HeapAlloc
HeapFree
GetCurrentThreadId
GetLastError
WaitForSingleObject
GetFileSizeEx
FileTimeToLocalFileTime
DosDateTimeToFileTime
GetTickCount
MapViewOfFile
LoadLibraryExW
GetModuleHandleW
GetACP
GetCPInfoExW
HeapSize
GetStringTypeW
HeapReAlloc
OutputDebugStringW
RtlUnwind
IsDebuggerPresent
GetCPInfo
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
CreateFileW
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetCommandLineW
IsProcessorFeaturePresent
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW

userenv

RegisterGPNotification
LoadUserProfileW

winspool.drv

EndPagePrinter

user32

CopyRect
SetCursor
GetClientRect
GetWindowTextLengthW
SetPropW
EnableScrollBar
GetScrollRange
GetScrollPos
SetScrollPos
EqualRect
EndPaint
DrawTextW
SetMenuDefaultItem
GetSystemMetrics
IsWindowEnabled
GetClassInfoExW
PostThreadMessageW
GetMessagePos
GetMessageW
GetWindow
CopyIcon
GetIconInfo
SetScrollInfo
TranslateMDISysAccel
WinHelpW
MonitorFromWindow
GetMonitorInfoW
DdeInitializeW
DdeSetUserHandle
LockWindowUpdate
EnumDisplayMonitors

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 750KB - Virtual size: 750KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

12a2b270b6c4f2b622a350c4164d942e

Headers

File Characteristics

Imports

crypt32

oleaut32

kernel32

userenv

winspool.drv

user32

Sections

.text Size: 67KB - Virtual size: 66KB

.rdata Size: 750KB - Virtual size: 750KB

.data Size: 10KB - Virtual size: 7.0MB

.text
Size: 67KB - Virtual size: 66KB

.rdata
Size: 750KB - Virtual size: 750KB

.data
Size: 10KB - Virtual size: 7.0MB