492ce56513c7706de6a3d8f1d3f991c0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

492ce56513c7706de6a3d8f1d3f991c0_JaffaCakes118
Size

2.6MB
MD5

492ce56513c7706de6a3d8f1d3f991c0
SHA1

6114c376feb5899aae2d8a4e0715ce6340ebbc4f
SHA256

bb15470f2ac9b43639f21841581e786e7a053a69e2be06194f0b2e3fed4ecaee
SHA512

859b856170c0a67d5447fe7626ab03e593b9266abf03e8beb3cc54187178391ed1364e2779f0c75e16a058b604cccb2ae02db9bbf1ff45a18d33785a759ebffe
SSDEEP

49152:TVfuZJdF+IRkuvuGM5KM7nDUaCMbTd8FJpFEtgUAHW:03Iuv05KqDnTd8FrqtY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
492ce56513c7706de6a3d8f1d3f991c0_JaffaCakes118

Files

492ce56513c7706de6a3d8f1d3f991c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be785b104bc91e8ffbfa60ea6c91f4c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoRevokeClassObject
CoTaskMemFree
CoTaskMemAlloc

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

oleacc

AccessibleObjectFromPoint
GetStateTextA

msimg32

GradientFill
TransparentBlt

kernel32

HeapCreate
GetStringTypeW
GetStringTypeA
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
CreateFileA
FlushFileBuffers
SetStdHandle
RtlUnwind
GetFileType
GetStdHandle
GetSystemTimeAsFileTime
GetCommandLineA
SetSystemPowerState
FormatMessageA
GetCPInfo
CreateEventA
FileTimeToLocalFileTime
GetVersion
GetVolumeInformationA
WriteConsoleW
GetEnvironmentVariableA
lstrlenA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
ExitProcess
HeapFree
GetLastError
CloseHandle
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
SetFilePointer
WriteFile
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount

Sections

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 408KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be785b104bc91e8ffbfa60ea6c91f4c6

Headers

DLL Characteristics

File Characteristics

Imports

ole32

version

oleacc

msimg32

kernel32

Sections

.text Size: 188KB - Virtual size: 188KB

.rdata Size: 260KB - Virtual size: 260KB

.data Size: 408KB - Virtual size: 1.7MB

.tls Size: 4KB - Virtual size: 4KB

.rsrc Size: 36KB - Virtual size: 33KB

.text
Size: 188KB - Virtual size: 188KB

.rdata
Size: 260KB - Virtual size: 260KB

.data
Size: 408KB - Virtual size: 1.7MB

.tls
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 36KB - Virtual size: 33KB