2e459e3747faddd8dd1f2e85892fd21c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e459e3747faddd8dd1f2e85892fd21c_JaffaCakes118
Size

438KB
MD5

2e459e3747faddd8dd1f2e85892fd21c
SHA1

8ddad113d171e027d246470f0c69856b43786a1e
SHA256

4f627478de76a1d34c50bba967d5e6a67721a8940f50391cbeeacc6cd5845700
SHA512

3ac8879916446f361dd1a064af6ff7e36ad0eb58c01e90fe3afba8e915d04826652db390641d3d26c601c20d29d3cc570e59fe84c3b14ac7a536269a2ea6c981
SSDEEP

12288:WBzT2qHGEMyW9IwWWXkWFeyWBGHJkd6nUc:WzT2qm7BqwWwkHyl+dm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e459e3747faddd8dd1f2e85892fd21c_JaffaCakes118

Files

2e459e3747faddd8dd1f2e85892fd21c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a69f7346b5fcb908c55b050aec7cc64b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetVersionExA
HeapDestroy
OutputDebugStringA
GetProcAddress
HeapValidate
HeapReAlloc
SetEnvironmentVariableA
CompareStringW
GetOEMCP
GetCurrentProcessId
SetHandleCount
GetPrivateProfileSectionNamesA
GetCommandLineA
SetLastError
TlsSetValue
InitializeCriticalSection
GlobalFree
SetStdHandle
UnhandledExceptionFilter
GetEnvironmentStrings
TlsFree
DeleteCriticalSection
GetSystemInfo
InterlockedIncrement
LocalCompact
GetLocaleInfoA
IsValidCodePage
ContinueDebugEvent
ExitProcess
GetTickCount
GlobalHandle
SetFilePointer
HeapFree
FreeEnvironmentStringsA
GetModuleFileNameA
GetStringTypeA
LoadLibraryA
QueryPerformanceCounter
FlushFileBuffers
VirtualAlloc
LoadLibraryExW
DebugBreak
TlsGetValue
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
WideCharToMultiByte
FreeEnvironmentStringsW
GetCurrentThread
GetFileType
LCMapStringW
TlsAlloc
HeapCreate
EnterCriticalSection
GetSystemTimeAsFileTime
GetACP
GetPrivateProfileStructW
LockFile
GetCPInfo
GetDateFormatA
OpenFileMappingW
MultiByteToWideChar
IsBadReadPtr
VirtualProtect
GetNumberFormatA
GetEnvironmentStringsW
LeaveCriticalSection
WriteFile
GetUserDefaultLCID
SetConsoleCtrlHandler
GetLastError
lstrcatA
InterlockedExchange
GetStartupInfoA
VirtualFree
EnumSystemLocalesA
IsBadWritePtr
CompareStringA
CloseHandle
InterlockedDecrement
GetTimeZoneInformation
HeapAlloc
LCMapStringA
SetConsoleTitleW
SetVolumeLabelA
GetTimeFormatA
VirtualQuery
GetModuleHandleA
IsValidLocale
GetLocaleInfoW
GetStringTypeW
RtlUnwind
CreatePipe

wininet

SetUrlCacheConfigInfoW
InternetSetOptionExA
FindNextUrlCacheEntryW
FtpFindFirstFileA
IsHostInProxyBypassList
InternetShowSecurityInfoByURLW
ShowX509EncodedCertificate
InternetQueryFortezzaStatus

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a69f7346b5fcb908c55b050aec7cc64b

Headers

File Characteristics

Imports

kernel32

wininet

Sections

.text Size: 154KB - Virtual size: 153KB

.data Size: 280KB - Virtual size: 279KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 154KB - Virtual size: 153KB

.data
Size: 280KB - Virtual size: 279KB

.rsrc
Size: 3KB - Virtual size: 2KB