1a2e09b43bd5431d9a0cb4970877b74f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1a2e09b43bd5431d9a0cb4970877b74f_JaffaCakes118
Size

62KB
MD5

1a2e09b43bd5431d9a0cb4970877b74f
SHA1

9bb4802b1d9d110bce219ea55adb838e565e196a
SHA256

4513cbb438bae7ded3d4dc9d0e5f4ce1a954155c728bae84ce89c0f5824f38af
SHA512

927b2fa364bac37fa263a118315fc146ca1a7b55415c755e058b2a410afb684706036586c30e482c66f7c2893581c008df193dcd5aa89ab53e84411b4299f586
SSDEEP

1536:HnKkCFnIaXz4gRYG5dVSnNh8RdwQBMfRS:HKkCtIwsd7fRS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a2e09b43bd5431d9a0cb4970877b74f_JaffaCakes118

Files

1a2e09b43bd5431d9a0cb4970877b74f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

abf5eac00dcc8744292b883b4ec6b09a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
CreateAcceleratorTableA
GetWindow
GetSystemMetrics

advapi32

RegDisablePredefinedCache

psapi

GetPerformanceInfo
GetDeviceDriverBaseNameA

wininet

HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetSetOptionA
InternetReadFile

kernel32

FlushFileBuffers
SetUnhandledExceptionFilter
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
CloseHandle
GetTickCount
GetWindowsDirectoryA
SetFileTime
GetVolumeInformationA
GetCurrentDirectoryA
SetErrorMode
DeviceIoControl
GetEnvironmentVariableA
LoadLibraryA
OpenMutexA
CreateMutexA
CreateFileA
CreateProcessA
WriteFile
DeleteFileA
Sleep
ExitProcess
CopyFileA
GetModuleFileNameA
GetCurrentProcessId
GetModuleHandleW
GetProcAddress
RtlUnwind
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
RaiseException
HeapAlloc
VirtualAlloc
HeapReAlloc

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

abf5eac00dcc8744292b883b4ec6b09a

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

psapi

wininet

kernel32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 10KB

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 10KB