3f5b59df59ff90b43e1520b6ff30dce0_JaffaCakes118

General

Target

3f5b59df59ff90b43e1520b6ff30dce0_JaffaCakes118
Size

391KB
MD5

3f5b59df59ff90b43e1520b6ff30dce0
SHA1

20beba79b31323e9b0934becdf35d8f1c6759f61
SHA256

5eddf6f6aee83b7ff0cdf030e28847690a0cd4605c82f31e964f48a14f0f43c5
SHA512

37be38064b226ff8e35c5b9f49b30ca05c2c98a483dcabfc9a769447b609ebb117ca51e00331c1188b9eb4626fcb9e965e2b9294ed95ee7f12674394b47b1aa9
SSDEEP

6144:Vgo6atFMKFypHDZofu4cSw/6S2HraFJFUdlvUOXDty2dUd0Q7JZ0KFFtZH3xXhl9:uo68F8DZofumOKw3HOzcd0s/FtNBx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f5b59df59ff90b43e1520b6ff30dce0_JaffaCakes118

Files

3f5b59df59ff90b43e1520b6ff30dce0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a5569336b16bbea7e5a558b97de706dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTitleW
TerminateProcess
CommConfigDialogW
OpenSemaphoreW
GetProcAddress
WaitCommEvent
HeapReAlloc
GetCurrentDirectoryW
EnumDateFormatsW
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapAlloc
TlsAlloc
GetCurrentThreadId
GetCurrentProcess
GetModuleHandleA
SetLocaleInfoW
GetTempPathW
SetConsoleCP
InterlockedExchange
RtlUnwind
CopyFileA
LockFileEx
WaitNamedPipeW
GetSystemDirectoryW
IsValidLocale
lstrcmp
GetVolumeInformationW
DeleteFileW
ExitProcess
GetTickCount
GetEnvironmentVariableW
EnumResourceLanguagesW
HeapFree
MoveFileExA
GetModuleFileNameA
GetShortPathNameA
LoadLibraryA
QueryPerformanceCounter
GetCalendarInfoW
VirtualAlloc
WriteConsoleOutputA
EnumCalendarInfoExW
VirtualQuery

wininet

FtpPutFileA
SetUrlCacheEntryInfoA
RunOnceUrlCache
InternetSetDialState
InternetGetLastResponseInfoA
FtpGetFileW
FtpCommandA
InternetDialA
InternetGoOnline
CreateUrlCacheEntryW
InternetTimeFromSystemTimeA
InternetAlgIdToStringA
InternetReadFile
GopherCreateLocatorW
InternetErrorDlg
InternetOpenW
InternetSetFilePointer

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5569336b16bbea7e5a558b97de706dd

Headers

File Characteristics

Imports

kernel32

wininet

Sections

.text Size: 121KB - Virtual size: 121KB

.data Size: 262KB - Virtual size: 262KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 121KB - Virtual size: 121KB

.data
Size: 262KB - Virtual size: 262KB

.rsrc
Size: 6KB - Virtual size: 6KB