3a88e187164f4bd631b7e006d658b101_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3a88e187164f4bd631b7e006d658b101_JaffaCakes118
Size

581KB
MD5

3a88e187164f4bd631b7e006d658b101
SHA1

7408915cf987b94b3bf200ca9c05574c51176265
SHA256

bda900cfeab6206a16acdc6317996fd8132188ec3a867e15d94b12e44f98bafb
SHA512

dedbd31e196a2cc730d81308b0f99c2203f876905abb67d4835c1ba347eb33ece8b95b2917e6caa9af981cbb24022732a4a1934a928f7059ad5cfe65a47d41a2
SSDEEP

12288:HC7IqsTcOIXGQ+IGnV5hUIEiIHFmP8l5yWI2Y2v+0WeG5mDmCYWJ:iU5c3XtvqVNNIHc8l5y/25G0Q5mD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a88e187164f4bd631b7e006d658b101_JaffaCakes118

Files

3a88e187164f4bd631b7e006d658b101_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80590ffb19bdbe51173600afcfc57767

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

SetLastError
EnterCriticalSection
GetCommandLineA
GetStdHandle
GetCurrentProcessId
GetStartupInfoW
GetStringTypeA
DeleteCriticalSection
HeapCreate
WaitNamedPipeA
IsBadWritePtr
HeapFree
UnhandledExceptionFilter
GetModuleFileNameW
SetFilePointer
GetCurrentProcess
GetCurrentThreadId
FreeEnvironmentStringsA
GetCommandLineW
GetStringTypeW
SetCriticalSectionSpinCount
VirtualQuery
GetSystemTimeAsFileTime
LCMapStringA
CreateMutexA
SetStdHandle
CompareStringA
CompareStringW
GlobalReAlloc
LocalAlloc
FreeEnvironmentStringsW
MultiByteToWideChar
HeapSize
SetEnvironmentVariableA
FindResourceExW
GetStartupInfoA
GetTickCount
IsValidLocale
TlsAlloc
GetLocaleInfoW
InterlockedCompareExchange
GetVersionExA
GetTimeFormatA
GetAtomNameW
HeapAlloc
SetHandleCount
IsValidCodePage
GetUserDefaultLCID
LoadLibraryA
QueryPerformanceCounter
GetLastError
GetTimeZoneInformation
CloseHandle
VirtualFree
LeaveCriticalSection
GetModuleFileNameA
GetModuleHandleA
ExitProcess
GetDateFormatA
TlsSetValue
ReadFile
GetACP
TlsGetValue
InterlockedExchange
VirtualProtect
TlsFree
GetCurrentThread
GlobalFindAtomA
HeapDestroy
FlushFileBuffers
OpenMutexA
InitializeCriticalSection
HeapReAlloc
SetWaitableTimer
CreateEventW
WideCharToMultiByte
GetEnvironmentStrings
DosDateTimeToFileTime
GetSystemInfo
EnumSystemLocalesA
WriteFile
GetEnvironmentStringsW
LCMapStringW
TerminateProcess
GetProcAddress
VirtualAlloc
GetOEMCP
GetFileType
GetLocaleInfoA
RtlUnwind
GetCPInfo

user32

CloseWindowStation
SendMessageTimeoutW
RegisterClassExA
RegisterWindowMessageW
GetSystemMetrics
RegisterClassA

Sections

.text
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 358KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80590ffb19bdbe51173600afcfc57767

Headers

File Characteristics

Imports

comctl32

kernel32

user32

Sections

.text Size: 207KB - Virtual size: 206KB

.rdata Size: 7KB - Virtual size: 35KB

.data Size: 358KB - Virtual size: 357KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 207KB - Virtual size: 206KB

.rdata
Size: 7KB - Virtual size: 35KB

.data
Size: 358KB - Virtual size: 357KB

.rsrc
Size: 8KB - Virtual size: 7KB