4bbc2d9f4ba42b2d83dfd2e0e6d49692_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4bbc2d9f4ba42b2d83dfd2e0e6d49692_JaffaCakes118
Size

320KB
MD5

4bbc2d9f4ba42b2d83dfd2e0e6d49692
SHA1

b64bc33cab475c89edf47b96cac84b46011d2603
SHA256

79adee7807db3666c6fef03050465c38dcf3225a6700809f928527b38b6ff40b
SHA512

7b1ac6b34a3162e3fcb237e16b860cea07bf2e0b19a4a644bb0cf2a88f9d70818b47e1a0f13668a7960235385f2a72cbd0fbeecd00f4faa56f86cf91bcb583d9
SSDEEP

3072:zh1xg9o+pch5n7Pe3wGCihnT7ChLMuDvWrL9dhPUie9jBPNQzhXBFE0/FOgZj/lZ:zx6pc+9IhLMEq9dxUl9pNQ3bljcap1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bbc2d9f4ba42b2d83dfd2e0e6d49692_JaffaCakes118

Files

4bbc2d9f4ba42b2d83dfd2e0e6d49692_JaffaCakes118
.exe windows:4 windows x86 arch:x86

963358992e74be0e15786fdf1089e539

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
TerminateProcess
FreeLibrary
GetProcAddress
LoadLibraryA
IsBadWritePtr
GetSystemDirectoryA
MultiByteToWideChar
lstrlenW
GetCurrentProcessId
Sleep
GetTempPathA
GetModuleHandleA
ExitProcess
SetFileAttributesA
GetFileAttributesA
GetVersionExA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
GetTickCount
HeapFree
HeapAlloc
FileTimeToSystemTime
LockResource
FreeResource
LoadResource
SizeofResource
FindResourceA
LoadLibraryExA
GetVolumeInformationA
GetCurrentDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
RaiseException
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
LocalFree
SetFilePointer
CreateFileA
WriteFile
CloseHandle
WideCharToMultiByte
GetCommandLineA
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetVersion
RtlUnwind
HeapReAlloc

user32

wsprintfA

shell32

SHChangeNotify
ShellExecuteExA

ole32

OleRun
CoCreateInstance
CoInitialize
CoTaskMemFree

oleaut32

VariantClear

netapi32

Netbios

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

963358992e74be0e15786fdf1089e539

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

oleaut32

netapi32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 252KB - Virtual size: 250KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 252KB - Virtual size: 250KB