0aeec52df9f2e4816e95ec23cf7f8c7c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0aeec52df9f2e4816e95ec23cf7f8c7c_JaffaCakes118
Size

156KB
MD5

0aeec52df9f2e4816e95ec23cf7f8c7c
SHA1

0654c9ee5cc9533c6e7463fc1ca5b0f8037490f7
SHA256

634a29eb8eb6255692e0f3da0204809637c3485f09c06ccd3b26b9867c5ff458
SHA512

9b57539762d12889e03e223afcf5ad7cb0b027c356d78a96fbe1b6a9490c98e5f0cddbf48f6e96d50465b9548fa3d0792b3fe47509c365069e911be5dbf6f2dc
SSDEEP

3072:G5DSJGHmxodBY3LuB9bteSho4XJMx51DNLb3gD:mScGxWBY3LzS1MttED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aeec52df9f2e4816e95ec23cf7f8c7c_JaffaCakes118

Files

0aeec52df9f2e4816e95ec23cf7f8c7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb29641f1ee599f999126c09e5cdf118

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetProfileStringW
GetSystemTime
GetStringTypeA
LCMapStringW
LCMapStringA
FindFirstChangeNotificationW
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
FindCloseChangeNotification
GetFileTime
GetCurrentProcessId
GetVolumeInformationW
InterlockedExchange
GetTimeFormatA
CopyFileW
GetTickCount
GetCurrentThreadId
DeleteFileW
CloseHandle
CreateProcessW
MultiByteToWideChar
Sleep
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetStringTypeW

user32

RegisterClassExA
SetWindowsHookExA
SystemParametersInfoW
GetWindowTextLengthA
GetMessageA
DrawIcon
LoadIconW
ReleaseCapture
LoadImageA
MapDialogRect

gdi32

AbortDoc
SetRectRgn
CombineRgn
EndDoc
GetDeviceCaps
Rectangle
RestoreDC
SaveDC
ExtTextOutA
CreateFontIndirectA
StartDocA
StartPage
SetAbortProc

ole32

CoRevokeClassObject

version

GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb29641f1ee599f999126c09e5cdf118

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

version

Sections

.text Size: 64KB - Virtual size: 62KB

.data Size: 72KB - Virtual size: 147KB

.edata Size: 8KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 64KB - Virtual size: 62KB

.data
Size: 72KB - Virtual size: 147KB

.edata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB