4c8e76765a2c00e683f057cf4ffad7cb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4c8e76765a2c00e683f057cf4ffad7cb_JaffaCakes118
Size

292KB
MD5

4c8e76765a2c00e683f057cf4ffad7cb
SHA1

25f5c3391ad82fc79e32c28e7fea367d4f552130
SHA256

0067c91fb2a1bba5ba971fd789563b62edc54e3b2a5a7fa52ef2ca3fd1cf1d2c
SHA512

df647aa09c16be8ca57081efd117ebc8befad62d3b627eb58d2d83e325986533427fc5b78929239dd0d336c24e5ca6d5798c994d5187b3e94657cc5ec959dd36
SSDEEP

6144:3W4ONN850+d2BQuqG2J3W30SghY+g21f9qGJbYG9:G4o+9G2J3WYhY+z1Vh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c8e76765a2c00e683f057cf4ffad7cb_JaffaCakes118

Files

4c8e76765a2c00e683f057cf4ffad7cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5aaa069ef0880839b9b00615939e6cad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
SetFileAttributesA
GetFileAttributesA
WriteFile
GetVersionExA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
GetTickCount
TerminateProcess
HeapFree
HeapAlloc
GetCommandLineA
LockResource
FreeResource
LoadResource
SizeofResource
FindResourceA
lstrlenW
GetVolumeInformationA
GetCurrentDirectoryA
SetFilePointer
LocalFree
CreateToolhelp32Snapshot
Process32First
Process32Next
RaiseException
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
FileTimeToSystemTime
MultiByteToWideChar
GetLastError
GetSystemDirectoryA
IsBadWritePtr
ExitProcess
GetCurrentProcessId
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetTempPathA
LoadLibraryExA
Sleep
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
HeapReAlloc
RtlUnwind

user32

wsprintfA

shell32

SHChangeNotify
ShellExecuteExA

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree
OleRun

oleaut32

VariantClear

netapi32

Netbios

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5aaa069ef0880839b9b00615939e6cad

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

oleaut32

netapi32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 224KB - Virtual size: 221KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 224KB - Virtual size: 221KB