3e4eb70071d46499d1211d0e7a9c7b50_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3e4eb70071d46499d1211d0e7a9c7b50_JaffaCakes118
Size

661KB
MD5

3e4eb70071d46499d1211d0e7a9c7b50
SHA1

5a137ee46bc7f1118a7cad029ad383b919364a52
SHA256

2fed21ef705e403f2e38cd215efef1ef051ec11370e583ca2c9d6c23250c74f0
SHA512

f62bcf2a183fca0afb24e716f76a42d041da97dd90369b49b75abe257a958b3a1b092ce443c62ae54dac183f11e0b593cb97e44bfa6cb95bec02442a1964731f
SSDEEP

12288:u5LtDIin4t1cwvontKfUye2yd2OLY8+JC6CNrgqWiIZPGi1No/gUySS:upSO6Z2GXe20vLnNEqW5v1NnzS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e4eb70071d46499d1211d0e7a9c7b50_JaffaCakes118

Files

3e4eb70071d46499d1211d0e7a9c7b50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba89203fd9cfc4a6b641ab4937865704

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

SetFileTime
OutputDebugStringA
GetTimeFormatA
FileTimeToSystemTime
CreateFileA
CreateProcessW
VirtualFree
InterlockedIncrement
LoadLibraryW
UnhandledExceptionFilter
lstrcmpiA
CreateMutexA
GetDateFormatA
FreeEnvironmentStringsA
GetConsoleOutputCP
GetConsoleCP
GetCurrentProcessId
WriteConsoleOutputCharacterA
GlobalFindAtomW
InterlockedExchange
IsValidCodePage
InitializeCriticalSection
OpenMutexA
GetModuleFileNameA
GetCPInfo
SetStdHandle
GetStringTypeW
GetACP
LCMapStringA
GetCurrentThreadId
EnterCriticalSection
IsDebuggerPresent
SetLastError
VirtualQuery
WriteConsoleOutputA
SetFilePointer
SetHandleCount
GetVersionExA
FreeEnvironmentStringsW
VirtualAlloc
WideCharToMultiByte
GetConsoleTitleW
HeapAlloc
IsValidLocale
GetStartupInfoA
WriteConsoleA
ReadFile
GetSystemTimeAsFileTime
LeaveCriticalSection
HeapDestroy
GetEnvironmentStrings
GetLastError
MultiByteToWideChar
GetModuleHandleA
GetDiskFreeSpaceExW
GetProcAddress
ReadConsoleOutputCharacterW
FreeLibrary
RtlUnwind
GetModuleFileNameW
GetThreadPriorityBoost
GetCommandLineW
LCMapStringW
GetFileType
TlsAlloc
HeapValidate
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
GetUserDefaultLCID
HeapFree
HeapReAlloc
GetStdHandle
GetEnvironmentStringsW
GetLocaleInfoA
QueryPerformanceCounter
TlsFree
GetTimeZoneInformation
GetCommandLineA
CompareStringW
LoadLibraryA
GetProcessHeap
GetCurrentThread
ExitProcess
CompareStringA
RaiseException
WriteFile
GetStartupInfoW
DeleteCriticalSection
TlsSetValue
GetConsoleMode
TlsGetValue
DebugBreak
GetCurrentProcess
OutputDebugStringW
FlushFileBuffers
GetOEMCP
lstrlenA
GetStringTypeA
GetLocalTime
GetLocaleInfoW
InterlockedDecrement
CloseHandle
IsBadReadPtr
WriteConsoleW
SetConsoleCtrlHandler
GetTickCount
EnumSystemLocalesA
HeapCreate

comdlg32

GetFileTitleW

user32

SetWindowContextHelpId
GetNextDlgTabItem
RegisterClassA
MessageBeep
RegisterClassExA
GetThreadDesktop
IsDialogMessageW

wininet

InternetWriteFileExA
FindNextUrlCacheEntryExA
DeleteUrlCacheContainerA
InternetSetCookieA
FtpCommandA
SetUrlCacheEntryGroupW
InternetQueryOptionA
GopherOpenFileA
InternetGoOnline

shell32

ExtractIconExA
InternalExtractIconListA

Sections

.text
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba89203fd9cfc4a6b641ab4937865704

Headers

File Characteristics

Imports

comctl32

kernel32

comdlg32

user32

wininet

shell32

Sections

.text Size: 460KB - Virtual size: 460KB

.rdata Size: 81KB - Virtual size: 107KB

.data Size: 106KB - Virtual size: 106KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 460KB - Virtual size: 460KB

.rdata
Size: 81KB - Virtual size: 107KB

.data
Size: 106KB - Virtual size: 106KB

.rsrc
Size: 12KB - Virtual size: 11KB