5b4504430b21a7ace3932b91832eadb6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5b4504430b21a7ace3932b91832eadb6_JaffaCakes118
Size

588KB
MD5

5b4504430b21a7ace3932b91832eadb6
SHA1

5189feddc1766a92270c164f5c60d785f2b2e2da
SHA256

471c2561e5f6df13bf179cfe1a41c47b5d5dc5e307fb60ef34c985a62508543d
SHA512

e01e0cf7bfae4d690c06b5e1caa23537b4b548f8a11d439ddf3bd9ec69a14f0dc1db33a19ee38fd78c2b272571fba3ce23f0e16d0a95e6f68042e8c8810781fb
SSDEEP

12288:Tsohl1xZ/UySl5oN1w2vnrpCdipVPxcSfGnR:TsoH1vUys501w2/gipNX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b4504430b21a7ace3932b91832eadb6_JaffaCakes118

Files

5b4504430b21a7ace3932b91832eadb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

769201281600d9d1db145c6f5d1d32f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetLastError
GetFileSize
FindResourceA
GetCurrentThreadId
ExitProcess
CreateFileA
SetEndOfFile
InterlockedDecrement
GlobalAlloc
InitializeCriticalSection
WriteConsoleA
TerminateProcess
LocalFree
WaitForMultipleObjects
GetACP
lstrcpynA
CompareStringA
SetUnhandledExceptionFilter
InterlockedExchange
GetModuleHandleA
GetStringTypeA
GetProcAddress
WideCharToMultiByte
CompareStringW
SetStdHandle
GlobalLock
HeapSize
MultiByteToWideChar
UnhandledExceptionFilter
DeleteFileA
FreeEnvironmentStringsW
GetCurrentProcessId
GetLocaleInfoA
GetConsoleMode
HeapAlloc
FreeEnvironmentStringsA
GetStdHandle
GetModuleFileNameA
GetVersionExA
GetEnvironmentStringsW
FlushFileBuffers
TlsAlloc
HeapDestroy
QueryPerformanceCounter
FreeLibrary
WaitForSingleObject
GlobalFree
GetModuleFileNameW
lstrlenA
SetHandleCount
EnterCriticalSection
HeapFree
IsValidCodePage
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetCurrentProcess
GetEnvironmentStrings
GetFileType
TlsSetValue
TlsGetValue
GetLastError
GetEnvironmentVariableA
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InterlockedIncrement
LeaveCriticalSection
GetCPInfo
GetOEMCP
HeapReAlloc
LoadLibraryA
GetStringTypeW
LCMapStringA
LCMapStringW

user32

EnableWindow
DispatchMessageA
GetDesktopWindow
LoadIconA
SetTimer
GetWindowLongA
ScreenToClient
LoadCursorA
ShowWindow
GetDlgItem
IsWindowVisible
LoadStringA
BeginPaint
SetWindowTextA
SetWindowLongA
GetDC
PostQuitMessage
TranslateMessage
GetWindowRect
EndPaint
SetWindowPos
DestroyMenu
KillTimer
GetParent
SetForegroundWindow
SetFocus

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

eqqyks
Size: 492KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

syymgge
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kguck
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

769201281600d9d1db145c6f5d1d32f3

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 32KB - Virtual size: 29KB

eqqyks Size: 492KB - Virtual size: 488KB

syymgge Size: 32KB - Virtual size: 30KB

kguck Size: 28KB - Virtual size: 25KB

.text
Size: 32KB - Virtual size: 29KB

eqqyks
Size: 492KB - Virtual size: 488KB

syymgge
Size: 32KB - Virtual size: 30KB

kguck
Size: 28KB - Virtual size: 25KB