2226c4dc5d13315c7b3b0e859046ff8c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2226c4dc5d13315c7b3b0e859046ff8c_JaffaCakes118
Size

500KB
MD5

2226c4dc5d13315c7b3b0e859046ff8c
SHA1

677c0bd9b4d3ced0eea7d33e04ab802364aed42c
SHA256

2d3e8f9e78ccde825c36a133fa2655cc74c9aa7994f66c46ec9d3297150d6ddb
SHA512

3721a60e73d6b5c4d517e316d2867a5cc14345a26ad173d5af219eb8ba443900f8f2002aa9902d6aec4a0df0d0d5cdeb1dc8677ff5a80fbbc25af51972379668
SSDEEP

12288:Y1rBV6LsxFar6DMnI6k9K9A3Zzb0ksvHKspBTONmIaQ9us60ZGfvYanJs1ZcLtjY:Y1eGar6DMnI6k9K9A3akkHK6BTONmIaQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2226c4dc5d13315c7b3b0e859046ff8c_JaffaCakes118

Files

2226c4dc5d13315c7b3b0e859046ff8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d0718ecfdbf54c99237b2c095ea36e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
WideCharToMultiByte
GetCommandLineW
GetModuleFileNameA
TerminateProcess
WaitForSingleObject
ResumeThread
SetThreadContext
WriteProcessMemory
GetProcAddress
GetModuleHandleA
VirtualProtectEx
VirtualAllocEx
VirtualAlloc
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
ReadFile
GetCurrentProcess
SetFilePointer
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapReAlloc
SetStdHandle
FlushFileBuffers
CloseHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
GetStringTypeW

user32

MessageBoxA

shell32

CommandLineToArgvW

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Smiley
Size: 4KB - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4d0718ecfdbf54c99237b2c095ea36e5

Headers

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 15KB

.Smiley Size: 4KB - Virtual size: 240B

.rsrc Size: 32KB - Virtual size: 30KB

. Size: 264KB - Virtual size: 264KB

. Size: 264KB - Virtual size: 264KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 15KB

.Smiley
Size: 4KB - Virtual size: 240B

.rsrc
Size: 32KB - Virtual size: 30KB

.
Size: 264KB - Virtual size: 264KB

.
Size: 264KB - Virtual size: 264KB