5a8f92a576e66581caf4693545b91a7c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5a8f92a576e66581caf4693545b91a7c_JaffaCakes118
Size

381KB
MD5

5a8f92a576e66581caf4693545b91a7c
SHA1

de530554d8d1818017fe3430300c99a791603e30
SHA256

d0824fa4a5a1e13dbc0cdabc3a00f07adeb917302b2dc8d8fd41ed4975d31993
SHA512

e95d18332ffdf8ca60e1cad0639801bf698597c493b9115bf069ef113afc397bb88224d7850277850a63436fa9b97f445118e65942e73c979c71814ce4b2bbca
SSDEEP

6144:HTiGrwCeg6AaTmlB0N/GZSQL2mleUrDodug1a5+itEhthnBE6qKLLEk:zvrwxghaTYYeZSQLLFrsdnTBnu6qKLN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a8f92a576e66581caf4693545b91a7c_JaffaCakes118

Files

5a8f92a576e66581caf4693545b91a7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b19decb8e3a55f3e716819a549a9078c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\roll\sent\Basic\Look\Fight\suffix\Happen\wrongpound.pdb

Imports

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock
UnloadUserProfile
DeleteProfileW
EnterCriticalPolicySection

kernel32

TlsFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetSystemInfo
CreateDirectoryW
DeleteFileW
ResetEvent
VirtualFree
VirtualProtect
VirtualAlloc
SetTapeParameters
VirtualProtectEx
GetComputerNameW
GetModuleHandleA
GetStartupInfoW
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
GetCurrentThread
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
HeapFree
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
LoadLibraryA
HeapAlloc
InitializeCriticalSection
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetTimeZoneInformation

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b19decb8e3a55f3e716819a549a9078c

Headers

File Characteristics

PDB Paths

Imports

userenv

kernel32

Sections

.text Size: 151KB - Virtual size: 150KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 7KB - Virtual size: 27KB

DATA Size: 110KB - Virtual size: 110KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 151KB - Virtual size: 150KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 7KB - Virtual size: 27KB

DATA
Size: 110KB - Virtual size: 110KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 4KB - Virtual size: 4KB