0ab98f8214828000186b00c89a4dd155_JaffaCakes118

General

Target

0ab98f8214828000186b00c89a4dd155_JaffaCakes118
Size

244KB
MD5

0ab98f8214828000186b00c89a4dd155
SHA1

2f7d85be13d63d1cb37871d40d4476596d826dfe
SHA256

9479b46c441d5e58615ffbd31463901d7ceda3406af488e8a9009420b47a0b73
SHA512

6e4f89e0a2cc0349591c12f3137695391e29e4650d84f0b721b5ea7fa50bfce59407139e1cb200c0ef3fcf3c64af1713e463cd1b04e72a1543cbcfc66366c818
SSDEEP

3072:/bzYNvELB89fIGTFwGKeSXkw+vqAboYsakbvHbWyk/GIkEYubWAC0pti:/b8N8S9gG5wGKb0wIqAMYck/7U0pti

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ab98f8214828000186b00c89a4dd155_JaffaCakes118

Files

0ab98f8214828000186b00c89a4dd155_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06cc9ed71baf94dc3a69e80cb626f317

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
VirtualFree
VirtualAlloc
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
Sleep
HeapSize
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 672KB - Virtual size: 669KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06cc9ed71baf94dc3a69e80cb626f317

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 672KB - Virtual size: 669KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 672KB - Virtual size: 669KB

.reloc
Size: 8KB - Virtual size: 6KB