3f0a2f37f88ea4ea3cde1af81ad27b91_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f0a2f37f88ea4ea3cde1af81ad27b91_JaffaCakes118
Size

615KB
MD5

3f0a2f37f88ea4ea3cde1af81ad27b91
SHA1

daf4209bb07757c169bde306aa6c32b549dba06c
SHA256

4c3a4cbde1b6b616068f09cb0565d025889d86152d8bde46ce2a7ccf986ac1bc
SHA512

f76b8a9eef430ca837ffc0662f44b7282bb2b8511080aacb3cf2950c404dfc5ce523498facf200d0e676bcc7c6d895de8bad29bc70374d1b567aefcb6b661583
SSDEEP

12288:D/5Gw8uAX4sCGA1t0dFjSkfu28Oaz9MOnYO:uuAX4s01t0dFmSCOazL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f0a2f37f88ea4ea3cde1af81ad27b91_JaffaCakes118

Files

3f0a2f37f88ea4ea3cde1af81ad27b91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37cd9561c36330b25280234e86327d73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
CreateDirectoryW
LoadLibraryW
FormatMessageW
GetModuleFileNameW
GetTempPathW
GetLastError
GetProcAddress
GetModuleFileNameA
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
WideCharToMultiByte
GetModuleHandleA
ExitProcess
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ReadFile
SetFilePointer
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
HeapSize
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
CreateFileW
GetLocaleInfoW
SetEndOfFile

Sections

.Smiley
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Smiley
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

37cd9561c36330b25280234e86327d73

Headers

File Characteristics

Imports

kernel32

Sections

.Smiley Size: 12KB - Virtual size: 8KB

Smiley Size: 128KB - Virtual size: 125KB

.rsrc Size: 36KB - Virtual size: 35KB

. Size: 160KB - Virtual size: 158KB

. Size: 160KB - Virtual size: 158KB

.Smiley
Size: 12KB - Virtual size: 8KB

Smiley
Size: 128KB - Virtual size: 125KB

.rsrc
Size: 36KB - Virtual size: 35KB

.
Size: 160KB - Virtual size: 158KB

.
Size: 160KB - Virtual size: 158KB