1036eafec8d0e010f05b6a05843835bc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1036eafec8d0e010f05b6a05843835bc_JaffaCakes118
Size

268KB
MD5

1036eafec8d0e010f05b6a05843835bc
SHA1

4ac7dd207a3aee49660f7371da4e8b4c3fc4f345
SHA256

8470e4ac8cae469accb8ef4e156048706548210f6f10c6b17c095fa7cd5e0349
SHA512

7a84fde0932d7ac486e3f0d82153aa596398c187644cc152ced4fdd53a1231a0f995c81d9ecff2a24b625c6d4fa499a6035552323ae383b6ac9e7a77cfe473ed
SSDEEP

3072:PCxeb/LUHo3RmVmRl+hEeejCD7A9AaatYZU+Ekpj2HyURExj9dCa8:L/RmV2l+hEW7AiaW3SxdCX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1036eafec8d0e010f05b6a05843835bc_JaffaCakes118

Files

1036eafec8d0e010f05b6a05843835bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93c4179563dcafd4279f30b465fcf3ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetHandleInformation
GetFileTime
GetFileSize
GetCurrentThreadId
GetComputerNameA
GetCommandLineA
GetACP
FreeLibrary
LoadLibraryA
lstrlenA
lstrcpynA
lstrcmpiA
lstrcmpA
lstrcpyA
lstrcatA
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetTimeZoneInformation
GetTimeZoneInformation
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
InterlockedIncrement
GlobalUnlock
GlobalLock
GlobalReAlloc
ExitThread
ExitProcess
CreateThread
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomA
DeleteAtom
AddAtomA
GetWindowsDirectoryA
DeleteFileA
SetFilePointer
FlushFileBuffers
WriteFile
ReadFile
GetLastError
CreateFileA
CopyFileA
WaitForMultipleObjects
WaitForSingleObjectEx
WaitForSingleObject
SetThreadPriority
CreateEventA
ResetEvent
OpenEventA
SetEvent
MoveFileA
HeapReAlloc
ReleaseMutex
CreateMutexA
OpenMutexA
TerminateThread
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetCurrentProcessId
GetSystemTimeAdjustment
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
VirtualAlloc
GetOEMCP
GetCPInfo
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
UnhandledExceptionFilter
GetLocalTime
GetStartupInfoA
GetSystemInfo
GetTickCount
GetVersionExA
IsBadCodePtr
OutputDebugStringA
HeapFree
GetProcessHeap
CloseHandle
HeapAlloc
GetCurrentProcess
TerminateProcess
GetVersion
GetModuleHandleA
GetProcAddress
GetStringTypeW

user32

PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
GetParent
GetWindowTextLengthA
BeginPaint
KillTimer
MessageBoxA
PostMessageA
PostQuitMessage
SetTimer
wsprintfA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA

advapi32

FreeSid
GetLengthSid
GetTokenInformation
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
AllocateAndInitializeSid

ole32

CoUninitialize
CoInitialize
OleRun
OleSetClipboard
OleSaveToStream
CoGetMalloc

Sections

.code
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 240KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

93c4179563dcafd4279f30b465fcf3ca

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.code Size: 4KB - Virtual size: 3KB

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 240KB - Virtual size: 2.2MB

.code
Size: 4KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 240KB - Virtual size: 2.2MB