2898aa6f5aea94be69f43084b69b4baf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2898aa6f5aea94be69f43084b69b4baf_JaffaCakes118
Size

104KB
MD5

2898aa6f5aea94be69f43084b69b4baf
SHA1

eea18b10d91e17e6c505098e9db573398a48b079
SHA256

1993eb5900e53eff597a6bef131f37877ef3d58a6e47d2d898206c4a0f37c1de
SHA512

e9eb64e34f6757145ef3a1d4dd452f929a3d20d52e2bad31b55874a683086e1e7e5c23d9d6745e8c717d423cf8726311292b118c13db1828b1bba9ffae2ee44d
SSDEEP

1536:HXWCXws9Yg16qshKMFlKlnLoQiR3+opgQ57fSe7vqr9yQV9v4Z8FbU:3WCguyqshKMrVRhfmezqrwQjv4Eg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2898aa6f5aea94be69f43084b69b4baf_JaffaCakes118

Files

2898aa6f5aea94be69f43084b69b4baf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62239210a546eea9eff75aae6793eb8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
CreateMutexA
UnmapViewOfFile
MapViewOfFile
Sleep
CreateFileMappingA
GetSystemTime
SetFilePointer
LoadLibraryA
GetProcAddress
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP

user32

DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
RegisterDeviceNotificationA
UnregisterDeviceNotification
RegisterClassExA
CreateWindowExA
PostQuitMessage
DefWindowProcA

ole32

CoUninitialize
CreateBindCtx
CoGetMalloc
CoCreateInstance
CoInitialize
MkParseDisplayName

oleaut32

SysAllocString
SysFreeString

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ordata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

62239210a546eea9eff75aae6793eb8a

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 4KB - Virtual size: 1008B

.ordata Size: 56KB - Virtual size: 56KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 4KB - Virtual size: 1008B

.ordata
Size: 56KB - Virtual size: 56KB