1a70ac13d8962d03a0b848fcdef0e22c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1a70ac13d8962d03a0b848fcdef0e22c_JaffaCakes118
Size

216KB
MD5

1a70ac13d8962d03a0b848fcdef0e22c
SHA1

cc64b4941ef328b3b67c89d37e14553307535ffa
SHA256

62c3dbcfb22fec0d0cfe3ef6b4feb5ec39072d60fd239fe17b6799e4a784b6d3
SHA512

c526ca3297219dd87bb6dba29dc3d592aa35056cf0b6d38941fff34da9cca159c9f0678be2dfab4bd30151369013aaca989ebf466d3ebe131ae1aae9160c3cb6
SSDEEP

3072:/hEtaGLQfOhqJluKChID46sG+z1UTcoHANGnLqPFOatU:/hJcQfVJluKCI3jvWPFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a70ac13d8962d03a0b848fcdef0e22c_JaffaCakes118

Files

1a70ac13d8962d03a0b848fcdef0e22c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40234b7e13ee5f900ddd544981818674

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

secur32

InitializeSecurityContextW
RevertSecurityContext
FreeContextBuffer

comctl32

CreateStatusWindowW
ord17
ImageList_SetOverlayImage
DestroyPropertySheetPage
ImageList_LoadImageW
ImageList_Destroy
CreateToolbarEx
ImageList_Add

kernel32

GetOEMCP
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetACP
WriteConsoleW
lstrcpyW
VerLanguageNameW
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoW
GetVersion
RtlUnwind
RaiseException
FatalAppExitA
HeapReAlloc
HeapSize
GetLastError
CloseHandle
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
WriteFile
GetModuleFileNameA
FlushFileBuffers
WideCharToMultiByte
SetUnhandledExceptionFilter
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetStdHandle
CreateFileA
GetProcAddress
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
ReadFile
GetStringTypeA
GetStringTypeW
SetEndOfFile
SetConsoleCtrlHandler
GetTimeZoneInformation
GetLocaleInfoW
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 903KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40234b7e13ee5f900ddd544981818674

Headers

File Characteristics

Imports

secur32

comctl32

kernel32

Sections

.text Size: 92KB - Virtual size: 88KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 80KB - Virtual size: 903KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 92KB - Virtual size: 88KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 80KB - Virtual size: 903KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 6KB