33e2d2a57818343625493a9895440bcf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

33e2d2a57818343625493a9895440bcf_JaffaCakes118
Size

560KB
MD5

33e2d2a57818343625493a9895440bcf
SHA1

e9416dfc3821a964e03b777d4e95a7d76da54e30
SHA256

03d2dd76eb5925859df0a3ca14f9832f39b10a3fa4a9b06ed69b64847b818b17
SHA512

80985f5f63202908bc3abf629f74e5835ca6342898d58d60957c32ea2427c50a615f5b56fd186b7d03d1da3680db9966c1f6884ab10230ba3d442ed1f9b53380
SSDEEP

12288:Llx2O5opaHwK9BPllo3ZFCBotxUkirbaLO48:LPipaHwK9R7WCBFDKO4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33e2d2a57818343625493a9895440bcf_JaffaCakes118

Files

33e2d2a57818343625493a9895440bcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9355c80035a3ee46a6d89c6f0af10ccf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

user32

IsRectEmpty
LoadCursorW
CreateAcceleratorTableA
RegisterClassExA
RegisterClassA

shell32

SHFileOperationA

kernel32

LCMapStringW
GetProcAddress
UnhandledExceptionFilter
IsBadWritePtr
QueryPerformanceCounter
FillConsoleOutputAttribute
HeapCreate
SetHandleCount
GetCurrentProcessId
FreeEnvironmentStringsA
GetModuleFileNameA
ReadFile
InitializeCriticalSection
TlsAlloc
GetTimeZoneInformation
LockFileEx
TlsSetValue
SetEnvironmentVariableA
GetStartupInfoW
LeaveCriticalSection
GetFileType
InterlockedDecrement
DeleteCriticalSection
TerminateProcess
CreateMutexA
TlsFree
GetStringTypeW
VirtualAlloc
WideCharToMultiByte
GetCurrentProcess
LoadLibraryA
WriteFile
GetStringTypeA
GetStdHandle
GetCurrentThreadId
InterlockedExchange
GetLastError
lstrcmpiW
GetEnvironmentStringsW
GetVersion
GetCommandLineW
MultiByteToWideChar
GetCurrentThread
ExitProcess
EnterCriticalSection
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStrings
GetLocalTime
HeapDestroy
InterlockedIncrement
CloseHandle
CompareStringW
GetTickCount
OpenMutexA
VirtualQuery
SetFilePointer
CompareStringA
SetStdHandle
LCMapStringA
GetCPInfo
GetModuleHandleA
HeapAlloc
GetModuleFileNameW
GetSystemTime
HeapFree
TlsGetValue
VirtualFree
HeapReAlloc
WritePrivateProfileSectionA
SetLastError
FlushFileBuffers
GetStartupInfoA
GetCommandLineA
RtlUnwind

Sections

.text
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9355c80035a3ee46a6d89c6f0af10ccf

Headers

File Characteristics

Imports

comctl32

user32

shell32

kernel32

Sections

.text Size: 233KB - Virtual size: 232KB

.rdata Size: 3KB - Virtual size: 22KB

.data Size: 315KB - Virtual size: 315KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 233KB - Virtual size: 232KB

.rdata
Size: 3KB - Virtual size: 22KB

.data
Size: 315KB - Virtual size: 315KB

.rsrc
Size: 7KB - Virtual size: 7KB