06edbe266ce45af245844a8c15a60e3a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

06edbe266ce45af245844a8c15a60e3a_JaffaCakes118
Size

270KB
MD5

06edbe266ce45af245844a8c15a60e3a
SHA1

f02ef9dc9c37168d9e830ede62daa3d6a4847f58
SHA256

243ceed79a68db9af6c8ab884c58298cd2ffbc893dd4af7e532fe484432ea4ee
SHA512

d5929ac497fc236dac5c30bcbf29a23d13064e802a9c10f63b0aba0e93ea616b2b81a84d762e4195b73f907e5b93302b39709b9a397ea21403673ccf647dafea
SSDEEP

6144:8tgHkAeCxmDXEV4QjbF+R42N+55PJI0+ab:urAFYyB/FyrEIv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06edbe266ce45af245844a8c15a60e3a_JaffaCakes118

Files

06edbe266ce45af245844a8c15a60e3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4adb07ded123f907573e4db9bdfabc81

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptProtectData
CryptUnprotectData
CertFreeCertificateContext
CertNameToStrW

oleaut32

RegisterTypeLi
VariantClear
LoadTypeLi
UnRegisterTypeLi
VariantInit
VariantCopyInd

psapi

GetModuleBaseNameW

user32

DestroyIcon
PostMessageW
GetActiveWindow
GetWindowThreadProcessId
EnumWindows
AllowSetForegroundWindow
GetDesktopWindow
LoadIconW
GetSystemMetrics

rpcrt4

UuidFromStringW

kernel32

FileTimeToSystemTime
GetUserDefaultUILanguage
GetUserGeoID
GetProcessHeap
SetUnhandledExceptionFilter
RaiseException
IsDebuggerPresent
SizeofResource
DeleteCriticalSection
GetCurrentThreadId
UnhandledExceptionFilter
CloseHandle
WaitForSingleObject
SystemTimeToTzSpecificLocalTime
GetQueuedCompletionStatus
GetSystemTimeAsFileTime
FindResourceExW
HeapAlloc
TzSpecificLocalTimeToSystemTime
WaitForMultipleObjects
LeaveCriticalSection
GetSystemTime
ExpandEnvironmentStringsW
DisableThreadLibraryCalls
ProcessIdToSessionId
HeapDestroy
GlobalFree
CreateIoCompletionPort
FreeLibrary
CompareFileTime
PostQueuedCompletionStatus
HeapReAlloc
GetGeoInfoW
EnterCriticalSection
CreateFileW
GetNumberFormatW
lstrlenW
LoadResource
LoadLibraryExW
WideCharToMultiByte
LocalAlloc
LockResource
OpenProcess
SystemTimeToFileTime
LocalFree
CreateProcessW
HeapSize
GetFileAttributesExW
GetLocalTime
FindResourceW
HeapFree
HeapCreate
VirtualAlloc
GetModuleHandleW

ole32

IIDFromString
StringFromCLSID
CoCreateInstance
CoTaskMemFree

dbghelp

ImageRvaToSection
SymGetLineNext
ImageNtHeader
SymCleanup
SymGetModuleInfo64
SymGetOptions
SymSetSearchPath
SymGetModuleInfoW
SymGetLinePrev64
ImageDirectoryEntryToDataEx
SymGetSymNext

winipsec

GetMMAuthMethods
DeleteMMFilter
AddTunnelFilter
GetQMPolicy

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.EIgZ
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EPCZCOd
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reLKp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.riHx
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IiOIfQu
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Vtsgtk
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.raIP
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uCzCk
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.evTh
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oeFk
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4adb07ded123f907573e4db9bdfabc81

Headers

File Characteristics

Imports

crypt32

oleaut32

psapi

user32

rpcrt4

kernel32

ole32

dbghelp

winipsec

Sections

.text Size: 111KB - Virtual size: 110KB

.EIgZ Size: 4KB - Virtual size: 4KB

.EPCZCOd Size: 1KB - Virtual size: 1KB

.reLKp Size: 4KB - Virtual size: 4KB

.data Size: 7KB - Virtual size: 80KB

.rdata Size: 114KB - Virtual size: 113KB

.riHx Size: 2KB - Virtual size: 2KB

.IiOIfQu Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 1KB

.Vtsgtk Size: 2KB - Virtual size: 1KB

.raIP Size: 2KB - Virtual size: 2KB

.uCzCk Size: 4KB - Virtual size: 3KB

.evTh Size: 4KB - Virtual size: 4KB

.oeFk Size: 5KB - Virtual size: 4KB

.text
Size: 111KB - Virtual size: 110KB

.EIgZ
Size: 4KB - Virtual size: 4KB

.EPCZCOd
Size: 1KB - Virtual size: 1KB

.reLKp
Size: 4KB - Virtual size: 4KB

.data
Size: 7KB - Virtual size: 80KB

.rdata
Size: 114KB - Virtual size: 113KB

.riHx
Size: 2KB - Virtual size: 2KB

.IiOIfQu
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 1KB

.Vtsgtk
Size: 2KB - Virtual size: 1KB

.raIP
Size: 2KB - Virtual size: 2KB

.uCzCk
Size: 4KB - Virtual size: 3KB

.evTh
Size: 4KB - Virtual size: 4KB

.oeFk
Size: 5KB - Virtual size: 4KB