318c98d2a18926019ca9a150a25af6cd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

318c98d2a18926019ca9a150a25af6cd_JaffaCakes118
Size

969KB
MD5

318c98d2a18926019ca9a150a25af6cd
SHA1

673a6c5f67fd61bed819944ba8b0ed29099df576
SHA256

9e29e62c7671b6fd03cf07e640b9ff95b0abe7d07f3d726dfe861aac963ce9e0
SHA512

b897737ae1a0af220a81adc631f794f959e01d24971753a5c84a04b15e253e76818536c7dfb3db7a65ec0a3d76672027261b48beed198a233cd6fb061cb16a4f
SSDEEP

24576:7sM+R7p6e24+kbOtdvzoMnzv4XbRhhHe0/DaT9BIuMoJEU:J+ue2AGETbsdJEU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
318c98d2a18926019ca9a150a25af6cd_JaffaCakes118

Files

318c98d2a18926019ca9a150a25af6cd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cf344c3cb68f36409cfef25dd97ad461

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
CreateEventA
CreateSemaphoreA
CreateMutexA
GetVersionExA
GetModuleHandleW
lstrlenA
VirtualAlloc
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetEnvironmentVariableA

shell32

SHParseDisplayName

winscard

SCardFreeMemory

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 455KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 443KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf344c3cb68f36409cfef25dd97ad461

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

winscard

Sections

.text Size: 42KB - Virtual size: 41KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 455KB - Virtual size: 489KB

BSS Size: 443KB - Virtual size: 443KB

.rsrc Size: 22KB - Virtual size: 22KB

.text
Size: 42KB - Virtual size: 41KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 455KB - Virtual size: 489KB

BSS
Size: 443KB - Virtual size: 443KB

.rsrc
Size: 22KB - Virtual size: 22KB