1a6c5b163807b5794cc9050535c3dfaf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1a6c5b163807b5794cc9050535c3dfaf_JaffaCakes118
Size

3.3MB
MD5

1a6c5b163807b5794cc9050535c3dfaf
SHA1

187717d577e72ebb3726dac03fbada931f6e0132
SHA256

c671e190de27fae4d0b51c307afacb69e5c275d688e96d7c59eb9c8a9fe6cf98
SHA512

57777e9f1dd376cc67b4fc133747356e6aa3665902b8d62358491ddd9fb1f53ff93b028a6761a256f60fcebd2bf68157286aaaf056fce7a9f73ec99568147eb0
SSDEEP

98304:NXkF9UXGVMo6T0gTd9amkOTsoBLN8FRSzI9kqI7:3XGVMozgLjkOw4LNiRSNqI7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a6c5b163807b5794cc9050535c3dfaf_JaffaCakes118

Files

1a6c5b163807b5794cc9050535c3dfaf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d5effde317484157a3c685cb752e6fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoRegisterSurrogate
CoRegisterClassObject
OleUninitialize
OleInitialize

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

oleacc

AccessibleObjectFromEvent
AccessibleObjectFromWindow
WindowFromAccessibleObject

msimg32

GradientFill
TransparentBlt

kernel32

GetCommandLineA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetSystemTimeAsFileTime
GetProcessHeap
SetSystemPowerState
FormatMessageA
GetCPInfo
CreateEventA
FileTimeToSystemTime
GetVersion
WriteConsoleW
GetComputerNameA
lstrcmpiA
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 552KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d5effde317484157a3c685cb752e6fa

Headers

DLL Characteristics

File Characteristics

Imports

ole32

version

oleacc

msimg32

kernel32

Sections

.text Size: 196KB - Virtual size: 196KB

.rdata Size: 216KB - Virtual size: 216KB

.data Size: 552KB - Virtual size: 1.9MB

.tls Size: 4KB - Virtual size: 4KB

.rsrc Size: 52KB - Virtual size: 49KB

.text
Size: 196KB - Virtual size: 196KB

.rdata
Size: 216KB - Virtual size: 216KB

.data
Size: 552KB - Virtual size: 1.9MB

.tls
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 52KB - Virtual size: 49KB