2b2384c7b06c5d5fcaeed7539337c32b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2b2384c7b06c5d5fcaeed7539337c32b_JaffaCakes118
Size

413KB
MD5

2b2384c7b06c5d5fcaeed7539337c32b
SHA1

d81b9b5e1f1d15adccbe67393f25be821645be97
SHA256

21ffac7c7a1e450807c4fedf3cbde39c7281f769fa99005ffc2874ec1291de51
SHA512

6c0dcfe99f6e14616fffe7a3e3a37ec4ad761524876d635c15244f6b324fe1246dc0f8911e9d595977eaca3bb18e1f56004574b1c57cd82959f3f6c9fc8dff39
SSDEEP

12288:J1+ZjR6kIxQUlPXJqBPpP1qGDLghcJLhjD:uZckIxQUhodqvho

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b2384c7b06c5d5fcaeed7539337c32b_JaffaCakes118

Files

2b2384c7b06c5d5fcaeed7539337c32b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b8a5e2c6ddcd7a47b9ff8d0c1b86493

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
DeleteCriticalSection
LCMapStringW
FormatMessageA
RtlUnwind
GetSystemInfo
GetConsoleMode
GetCurrentProcess
GetStartupInfoA
VirtualAlloc
SetEnvironmentVariableA
IsValidCodePage
HeapReAlloc
GetLocaleInfoA
Sleep
GetLastError
GetCPInfo
MultiByteToWideChar
GetModuleFileNameA
GetCommandLineW
GetStringTypeW
ExitProcess
GetEnvironmentStrings
GetStringTypeA
GetUserDefaultLCID
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoW
GetACP
HeapDestroy
QueryPerformanceCounter
WriteFile
TlsGetValue
lstrlenW
TlsFree
VirtualProtect
FreeEnvironmentStringsW
HeapAlloc
GetModuleFileNameW
HeapFree
EnumSystemLocalesA
SetHandleCount
GetCurrentProcessId
GetNamedPipeInfo
GetTimeFormatA
GetStdHandle
UnhandledExceptionFilter
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetTimeZoneInformation
GetCommandLineA
IsBadWritePtr
TlsSetValue
GetShortPathNameW
CompareStringA
GetModuleHandleA
IsValidLocale
GetDateFormatA
GlobalDeleteAtom
SetLastError
TlsAlloc
CreateMutexW
WriteProfileStringA
EnterCriticalSection
GetVersionExA
GetProcAddress
GetFileType
GetLocaleInfoW
CompareStringW
LCMapStringA
InterlockedExchange
HeapSize
TerminateProcess
GetOEMCP
VirtualQuery
WideCharToMultiByte
VirtualFree
CopyFileExA
LeaveCriticalSection
GetCurrentThreadId
InitializeCriticalSection
EnumDateFormatsW

wininet

InternetFindNextFileW
InternetFindNextFileA
DeleteUrlCacheEntry
HttpEndRequestA
IsHostInProxyBypassList
GetUrlCacheGroupAttributeW
CreateUrlCacheContainerA
InternetTimeToSystemTimeW
UrlZonesDetach
FtpPutFileEx
InternetHangUp
GopherGetLocatorTypeA
FreeUrlCacheSpaceA
ReadUrlCacheEntryStream
FtpRenameFileA
LoadUrlCacheContent
DeleteUrlCacheEntryA
InternetConfirmZoneCrossingW
DeleteUrlCacheEntryW
InternetGetLastResponseInfoW
FtpDeleteFileW
FtpGetFileA

gdi32

PlayMetaFileRecord
CreatePalette
PaintRgn
CreateBitmapIndirect
SetBkMode
GetBoundsRect
CreateEnhMetaFileW
EnumFontFamiliesExA
GetObjectW
GetEnhMetaFileBits
GetWorldTransform
DeviceCapabilitiesExA
LPtoDP
GetCharWidthFloatA
WidenPath
ScaleViewportExtEx
PathToRegion
EndPage
CreateRoundRectRgn
InvertRgn
DeleteDC
GetStockObject
Ellipse
EnumFontsW

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b8a5e2c6ddcd7a47b9ff8d0c1b86493

Headers

File Characteristics

Imports

kernel32

wininet

gdi32

Sections

.text Size: 129KB - Virtual size: 129KB

.data Size: 272KB - Virtual size: 300KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 129KB - Virtual size: 129KB

.data
Size: 272KB - Virtual size: 300KB

.rsrc
Size: 10KB - Virtual size: 9KB