4754db7b28c0bee0df9dca3dd0d00e32_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4754db7b28c0bee0df9dca3dd0d00e32_JaffaCakes118
Size

256KB
MD5

4754db7b28c0bee0df9dca3dd0d00e32
SHA1

a9a943dc0c4e8ef6c3ea22d62a89f7ad8de6086d
SHA256

f1ca5de1be6d0e12aefa59763a71f124ac0228343089ecbe308fc39e9fe2749a
SHA512

b56b72ff672a6c15c482774d41ee7afe357c0762fc7378a7f229bf8dcb0edee0af51a7412c71e1f8321b8b740ba960a7a817b1d16de73966862ddd23c7d66315
SSDEEP

6144:wRKo8tmySoM4Jpl83e+sqzkqT/jA6Gyrfa:88tmyg4Jp23e+nkqTrOym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4754db7b28c0bee0df9dca3dd0d00e32_JaffaCakes118

Files

4754db7b28c0bee0df9dca3dd0d00e32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b91ba655416221587dca224ea27c0172

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CLSIDFromString
CoInitialize
OleInitialize
OleSetContainedObject

kernel32

VirtualAlloc
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
WriteConsoleW
lstrcmpW
GetSystemTimeAsFileTime
SetSystemPowerState
FormatMessageW
GetCPInfo
FlushFileBuffers
CreateThread
LocalFree
LocalAlloc
CloseHandle
ReadFile
GetFileSize
SetFilePointer
CreateFileW
DeleteCriticalSection
CreateProcessW
GetFileAttributesW
GetWindowsDirectoryW
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoW
GetVersion
RtlUnwind
RaiseException
FatalAppExitA
HeapReAlloc
HeapSize
GetLastError
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
WriteFile
GetModuleFileNameA
WideCharToMultiByte
SetUnhandledExceptionFilter
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetStdHandle
CreateFileA
GetProcAddress
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetEndOfFile
SetConsoleCtrlHandler
GetTimeZoneInformation
GetLocaleInfoW
LCMapStringA
LCMapStringW

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b91ba655416221587dca224ea27c0172

Headers

File Characteristics

Imports

ole32

kernel32

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 96KB - Virtual size: 848KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 96KB - Virtual size: 848KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 12KB - Virtual size: 8KB