3f112b8430d213fb0d6bc8c1cced9b59_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f112b8430d213fb0d6bc8c1cced9b59_JaffaCakes118
Size

473KB
MD5

3f112b8430d213fb0d6bc8c1cced9b59
SHA1

7cec3bdc7917f2a11362c4fe35402eec9ac1c549
SHA256

c5fc3c9f4361bc680a1f817ce00e00a331fc22ba26117f7ac5f5fe0fc54d9488
SHA512

43183dece545dca987aedf7be252aae08d27d40480b75e270c3fec147c09784f499a3e6174322097acdc933586c3cad537d5540c0a75f1fb82799fa32e69db81
SSDEEP

12288:eifKld6ArkxqydRf+yf5oPFiSEQ8ti5zhRPi:eifKlv037ZEELti5zh4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f112b8430d213fb0d6bc8c1cced9b59_JaffaCakes118

Files

3f112b8430d213fb0d6bc8c1cced9b59_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f25eb5a858877c98c5ad7125f747883

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Documents and Settings\Administrator\Desktop\cwebpage_src\simple\Debug\Simple.pdb

Imports

kernel32

GlobalFree
GlobalAlloc
MultiByteToWideChar
CompareStringW
CompareStringA
FlushFileBuffers
CloseHandle
CreateFileA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InterlockedExchange
RtlUnwind
IsValidCodePage
GetModuleFileNameW
GetCommandLineA
GetStartupInfoA
IsDebuggerPresent
RaiseException
DebugBreak
WideCharToMultiByte
lstrlenA
GetProcAddress
LoadLibraryA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapValidate
IsBadReadPtr
GetStdHandle
InterlockedDecrement
WriteFile
OutputDebugStringA
InterlockedIncrement
GetLastError
WriteConsoleW
GetFileType
OutputDebugStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
SetConsoleCtrlHandler
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
GetProcessHeap
VirtualQuery
FreeLibrary
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
SetEnvironmentVariableA

user32

GetMessageA
GetWindowLongA
GetClientRect
SetWindowLongA
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
RegisterClassExA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage

ole32

OleSetContainedObject
CoGetClassObject
OleUninitialize
OleInitialize

oleaut32

VariantInit
SysAllocString
VariantClear
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy

Sections

.textbss
Size: - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f25eb5a858877c98c5ad7125f747883

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

oleaut32

Sections

.textbss Size: - Virtual size: 169KB

.text Size: 356KB - Virtual size: 355KB

.rdata Size: 80KB - Virtual size: 80KB

.data Size: 5KB - Virtual size: 14KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 26KB - Virtual size: 25KB

.textbss
Size: - Virtual size: 169KB

.text
Size: 356KB - Virtual size: 355KB

.rdata
Size: 80KB - Virtual size: 80KB

.data
Size: 5KB - Virtual size: 14KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 26KB - Virtual size: 25KB