1af62585a2bbad9b7eda7a774aa421fe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1af62585a2bbad9b7eda7a774aa421fe_JaffaCakes118
Size

459KB
MD5

1af62585a2bbad9b7eda7a774aa421fe
SHA1

dcf21e213c643b62d363840dce819066f70d13a4
SHA256

9955b448730ae4cfb2de1701971b815dac02fbd47841707a037a374bfcb5cd26
SHA512

8a49ffd0b798348566fa828c235d703b945dd2cd08eef8f18c6a4f67e6816a80bd239983d41042fd801fba0ca9a446bbf2683a31ddaea860fc06ee9f2fcec2ba
SSDEEP

6144:GDLWcmGuWgcCF5ivVjI5IOh+gz1RJmf9eLSnDjFMIt5YhXundO3fC9i7jpusdh:iPmGuWG5DKOguXmfiQKpe0RH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1af62585a2bbad9b7eda7a774aa421fe_JaffaCakes118

Files

1af62585a2bbad9b7eda7a774aa421fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f2a3cd49873ac25c88e1d77a2f26ea0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesA
FillConsoleOutputAttribute
InterlockedDecrement
WriteConsoleInputW
RtlUnwind
GetOEMCP
GetConsoleOutputCP
GetCurrentProcess
GetLastError
VirtualAlloc
IsValidCodePage
HeapSize
HeapReAlloc
GetCurrentThread
WriteProfileSectionW
GetCommandLineW
CompareStringW
IsDebuggerPresent
GetModuleFileNameA
EnterCriticalSection
GetModuleHandleW
ExitProcess
FreeLibrary
GetModuleFileNameW
GetStdHandle
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
GetLocaleInfoA
CompareStringA
GetTimeZoneInformation
QueryPerformanceCounter
Sleep
LeaveCriticalSection
VirtualFree
LCMapStringW
SetLastError
SetCurrentDirectoryW
HeapAlloc
GetEnvironmentStringsW
HeapFree
TerminateThread
WriteFile
GetCurrentProcessId
FreeEnvironmentStringsA
GetStartupInfoA
GetLocaleInfoW
SetEnvironmentVariableA
GetStringTypeW
DeleteFiber
GetACP
GetStartupInfoW
DeleteCriticalSection
TlsGetValue
SetConsoleCtrlHandler
OpenSemaphoreW
GetThreadContext
UnhandledExceptionFilter
TlsSetValue
TlsFree
GlobalFlags
CreateFileMappingA
LCMapStringA
FreeResource
ExpandEnvironmentStringsW
WideCharToMultiByte
GetStringTypeA
GetProcAddress
GetCPInfo
GetDateFormatA
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetUserDefaultLCID
TlsAlloc
GetFileType
VirtualQuery
SetUnhandledExceptionFilter
SetHandleCount
GetTimeFormatA
InterlockedIncrement
GetCurrentThreadId
HeapCreate
EnumResourceLanguagesA
TerminateProcess
FreeEnvironmentStringsW
HeapDestroy
GlobalUnfix
GetModuleHandleA
IsValidLocale

comdlg32

ReplaceTextA
GetOpenFileNameW
PrintDlgW
ChooseFontA
LoadAlterBitmap
ChooseColorW
GetSaveFileNameW
PageSetupDlgA
PrintDlgA
ChooseFontW

advapi32

RegQueryInfoKeyW
LogonUserW
RegOpenKeyA
RegFlushKey
CryptDestroyKey
RegEnumKeyW
CryptContextAddRef
LogonUserA
RegOpenKeyExW
RegSaveKeyA
RegQueryValueExA
RegOpenKeyW
RegSetValueW
CryptSetProviderW
CryptImportKey
RegDeleteValueA
RegEnumKeyExA
LookupPrivilegeValueA

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 313KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f2a3cd49873ac25c88e1d77a2f26ea0

Headers

File Characteristics

Imports

kernel32

comdlg32

advapi32

Sections

.text Size: 141KB - Virtual size: 141KB

.data Size: 313KB - Virtual size: 334KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 141KB - Virtual size: 141KB

.data
Size: 313KB - Virtual size: 334KB

.rsrc
Size: 3KB - Virtual size: 3KB