0a5dc9a740a730db711c5dda95eafdad_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0a5dc9a740a730db711c5dda95eafdad_JaffaCakes118
Size

292KB
MD5

0a5dc9a740a730db711c5dda95eafdad
SHA1

c9e1d12b35797d141e75ee084a0555df8d245226
SHA256

01f09ec505d61b0fffdb0b523369b6a4ca1f4c7701f3de224f44fb4286486bcb
SHA512

bb47921090ee2a7e0467b781d2abb19ad250a212c7f9a5aa839de405d48e1fd14f22f323d49b0db8667604723cfb6234bf571a4b64c815323bffd48d94433f24
SSDEEP

3072:sskB6e+bcfy0m9bME327zoGuhrNWfuFQZfTT5Ylxgsg6PXjicp6E6VVyvXjiHVNZ:OfMuEpGuGfuFLgs9i4UIIF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a5dc9a740a730db711c5dda95eafdad_JaffaCakes118

Files

0a5dc9a740a730db711c5dda95eafdad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e86710e445b9bbf41c715f7a69de652c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
MultiByteToWideChar
lstrlenW
GetLastError
EnterCriticalSection
LockResource
DeleteCriticalSection
CloseHandle
LocalFree
GetFileSize
SetErrorMode
CreateProcessW
GetVolumeInformationA
CreateProcessA
ReadFile
GetSystemDirectoryA
GetACP
LeaveCriticalSection
GetModuleFileNameA
Process32NextW
CreateToolhelp32Snapshot
GetFileTime
GetVersionExA
GetWindowsDirectoryW
GetTempPathA
SetEvent
TerminateThread
GetExitCodeThread
CreateEventW
CreateThread
GetModuleFileNameW
WaitForMultipleObjects
SetFilePointer
FlushFileBuffers
GetConsoleMode
FormatMessageW
SizeofResource
Sleep
WideCharToMultiByte
InitializeCriticalSection
WriteFile
GetProcessHeap
GetTickCount
WaitForSingleObject
HeapFree
HeapAlloc
LoadResource
FindResourceW
FindResourceExW
lstrlenA
Process32FirstW
HeapReAlloc
SetEndOfFile
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetConsoleCP
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetExitCodeProcess
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
InterlockedExchange
GetLocaleInfoA
GetThreadLocale
RaiseException
HeapDestroy
HeapSize
InterlockedIncrement
InterlockedDecrement
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
DeleteFileW
GetLocalTime
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
GetStdHandle
GetFileAttributesW
SetHandleCount
GetFileType

user32

GetActiveWindow
GetKeyboardState
UnregisterClassA

advapi32

QueryServiceStatusEx
StartServiceW
ChangeServiceConfig2W
OpenSCManagerW
CloseServiceHandle
CreateServiceW
RegisterServiceCtrlHandlerW
SetServiceStatus
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
StartServiceCtrlDispatcherW

ole32

CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
StringFromCLSID

ws2_32

WSACloseEvent
WSASetEvent
WSAStartup
getaddrinfo
WSARecv
WSASocketW
WSASend
WSAGetLastError
WSAEnumNetworkEvents
WSAEventSelect
WSACleanup
WSAGetOverlappedResult
freeaddrinfo
WSACreateEvent
WSASetLastError
closesocket
WSAResetEvent
WSAConnect

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e86710e445b9bbf41c715f7a69de652c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

ws2_32

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 1KB