171195060410f30d986a8ec4d970590d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

171195060410f30d986a8ec4d970590d_JaffaCakes118
Size

417KB
MD5

171195060410f30d986a8ec4d970590d
SHA1

dd47f73964a40a49ef089aa300fdd6de9f7c7b99
SHA256

c6be6fe757c04f28293182fe61107212a04b0f25df89fa31910dd124f4405aa5
SHA512

8055777ba257c3b359d2b35d11f543a2061073e281382d80c642d9e669e252e2ba309084a8e7349650b977d40b17c434b02a49803565d32855c842b5dfeb9bd5
SSDEEP

6144:fLfSk8s05VJPjgSayAHaIzAboHzC4fn0P0oQv40gwtSRhI3vUAf+S19VSVPXdNEc:fjlj05gyAHJzC4fnsQEkPf+0U8J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171195060410f30d986a8ec4d970590d_JaffaCakes118

Files

171195060410f30d986a8ec4d970590d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab89a617593bfd302710fb8d1fc397b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
GetModuleHandleA
GetStdHandle
RtlFillMemory
DeleteCriticalSection
GetCurrentThreadId
GetPrivateProfileStructW
LeaveCriticalSection
GetLastError
GetTickCount
GetUserDefaultLCID
GetTimeFormatA
GetModuleHandleW
InterlockedIncrement
MultiByteToWideChar
HeapAlloc
TlsSetValue
EnterCriticalSection
GetStartupInfoA
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
GetProfileSectionA
GetStartupInfoW
GetEnvironmentStringsW
FoldStringA
VirtualFree
CompareStringA
GetCurrentProcessId
GetDateFormatA
GetModuleFileNameW
InterlockedExchange
IsDebuggerPresent
IsValidCodePage
CompareStringW
GetStringTypeA
HeapSize
SetConsoleCP
VirtualAlloc
GetWindowsDirectoryA
GetEnvironmentStringsA
HeapReAlloc
GetVersion
UnhandledExceptionFilter
LoadLibraryA
CreateEventA
VirtualQuery
GetDiskFreeSpaceA
GlobalFindAtomW
GetFileType
TlsFree
GetSystemTimeAdjustment
TlsGetValue
WideCharToMultiByte
GetOEMCP
HeapCreate
GetCommandLineW
GetCPInfo
HeapDestroy
FreeEnvironmentStringsW
SetLastError
SetUnhandledExceptionFilter
WriteFile
GetStringTypeW
GetCurrentThread
EnumCalendarInfoW
GetProcAddress
ConnectNamedPipe
GlobalUnfix
GetLocaleInfoW
GetModuleFileNameA
SetConsoleCtrlHandler
GetLocaleInfoA
HeapFree
IsValidLocale
RtlUnwind
GetSystemTimeAsFileTime
EnumSystemLocalesA
VirtualUnlock
FindFirstFileW
GlobalGetAtomNameW
SetEnvironmentVariableA
SetVolumeLabelW
InterlockedDecrement
VirtualProtectEx
ExitProcess
TlsAlloc
GetACP
LCMapStringW
FreeLibrary
GetTimeZoneInformation
QueryPerformanceCounter
LCMapStringA
SetHandleCount
lstrcmpiW
TerminateProcess
Sleep

wininet

RegisterUrlCacheNotification
ShowClientAuthCerts
HttpCheckDavCompliance
GopherFindFirstFileA
InternetOpenUrlA
FtpOpenFileA
InternetCheckConnectionW
IncrementUrlCacheHeaderData
RetrieveUrlCacheEntryFileA

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab89a617593bfd302710fb8d1fc397b2

Headers

File Characteristics

Imports

kernel32

wininet

Sections

.text Size: 119KB - Virtual size: 119KB

.rdata Size: 8KB - Virtual size: 29KB

.data Size: 284KB - Virtual size: 283KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 119KB - Virtual size: 119KB

.rdata
Size: 8KB - Virtual size: 29KB

.data
Size: 284KB - Virtual size: 283KB

.rsrc
Size: 4KB - Virtual size: 3KB