0c58db943bfcc752c22648589daef5f9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0c58db943bfcc752c22648589daef5f9_JaffaCakes118
Size

515KB
MD5

0c58db943bfcc752c22648589daef5f9
SHA1

4cd7b51433265bf2e92ecc1d3cfc2bdc3624b922
SHA256

9a3e680b7039736e31d9fe316de192e266450cc9c5633dc0dd7fd276d45705c1
SHA512

1bae042a5789e47fda6220984ff889d6a6eb35b256d5b8b62e9cf4d68aed9f321d26d47980fd0abf14cea3cb4308eaa5c2aea3c1e3d8e6649a38879d36f1b6fe
SSDEEP

6144:JuVUUjwolg4owroOvHlq1t423ykka8dX+wWAZF5ULT0pny+6BTXQ02kAfpkKu/Ti:JuVUpob/8OvHs3tbP0pvxkep5ZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c58db943bfcc752c22648589daef5f9_JaffaCakes118

Files

0c58db943bfcc752c22648589daef5f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a27a282eaa8dea8ef01eb4bdd213fffb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharPrevExA
CharPrevA
CharLowerW
CharLowerA
CharUpperW
CharNextA
CharUpperA

oleaut32

VariantCopy
VariantClear
SysFreeString
SysAllocString

kernel32

CompareFileTime
GetStringTypeW
GetStringTypeA
LCMapStringW
SetConsoleCtrlHandler
FileTimeToLocalFileTime
GetCommandLineW
SetFileApisToOEM
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
GetWindowsDirectoryW
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathA
SearchPathW
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
CreateFileA
GetFileSize
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
GetCurrentProcess
GetProcAddress
FileTimeToSystemTime
GetSystemInfo
GlobalMemoryStatus
GetModuleHandleA
DosDateTimeToFileTime
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
GetStdHandle
WaitForMultipleObjects
OpenEventA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
LocalFileTimeToFileTime
GetTickCount
GetProcessTimes
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
RaiseException
RtlUnwind
HeapAlloc
HeapFree
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
ExitProcess
SetUnhandledExceptionFilter
TlsAlloc
TerminateProcess
HeapReAlloc
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LCMapStringA

Sections

.text
Size: 438KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a27a282eaa8dea8ef01eb4bdd213fffb

Headers

File Characteristics

Imports

user32

oleaut32

kernel32

Sections

.text Size: 438KB - Virtual size: 438KB

.rdata Size: 55KB - Virtual size: 55KB

.data Size: 27KB - Virtual size: 51KB

.rsrc Size: 1024B - Virtual size: 808B

.text
Size: 438KB - Virtual size: 438KB

.rdata
Size: 55KB - Virtual size: 55KB

.data
Size: 27KB - Virtual size: 51KB

.rsrc
Size: 1024B - Virtual size: 808B