5c6697c16127643904c2186aae7ca8e1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5c6697c16127643904c2186aae7ca8e1_JaffaCakes118
Size

432KB
MD5

5c6697c16127643904c2186aae7ca8e1
SHA1

3e93fe85ea8f8d36eec28b27b8494a45ae2535e1
SHA256

582c8ddb96023e387386383fe135b385e88bc610eed5325d78bbe8d2754b2909
SHA512

9ddab98a8fae3993f76c85daf60cff10de4cfe75523d757f1a49cfaf782ce084b6cfbbcde8ebfeefca49241d93cd2fbccd39cbfee267357f175aa9175f343cd6
SSDEEP

12288:LYJQ2FxD9PlPC8yTJF8ZD3Z+4moVXrlJrN2KRO2bgnbG9:Mx//ZD3Z+Zo5JrNFkb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c6697c16127643904c2186aae7ca8e1_JaffaCakes118

Files

5c6697c16127643904c2186aae7ca8e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0320d4442f5b52b9e3a6bd467b19bb2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdeUninitialize
GetUserObjectSecurity
SetProcessWindowStation
WindowFromDC

wininet

UnlockUrlCacheEntryStream
FindFirstUrlCacheGroup
InternetCrackUrlA
InternetGoOnlineA
InternetCreateUrlA
SetUrlCacheEntryInfoW
InternetSetOptionA
GopherGetLocatorTypeW
SetUrlCacheHeaderData
InternetWriteFile
FtpGetCurrentDirectoryW
InternetOpenA
FtpOpenFileW
FindFirstUrlCacheEntryExA
InternetFindNextFileW
InternetGetCertByURLA
FindFirstUrlCacheEntryA

comdlg32

PrintDlgA
ChooseFontA

gdi32

GetBoundsRect
GetSystemPaletteUse
GetTextExtentPoint32W
SetFontEnumeration
GetCharABCWidthsW
PtInRegion
CloseMetaFile
StretchBlt
AbortPath
GetSystemPaletteEntries
GetNearestColor
GetStockObject
LineDDA
GetTextColor
CombineRgn
EnumMetaFile

kernel32

GetStartupInfoA
GetCurrentThreadId
FreeEnvironmentStringsW
GetCurrentThread
HeapCreate
VirtualQuery
HeapAlloc
GetEnvironmentStringsW
SetHandleCount
ExitProcess
LeaveCriticalSection
RtlUnwind
TerminateProcess
CreateFileA
TlsGetValue
GetShortPathNameA
GetVersion
GetMailslotInfo
HeapReAlloc
VirtualFree
MoveFileA
SuspendThread
LoadLibraryA
GetFileType
GetStartupInfoW
InitializeCriticalSection
GetOEMCP
GetStdHandle
WriteFile
QueryPerformanceCounter
HeapFree
HeapDestroy
GetCurrentProcessId
GetEnvironmentStrings
FillConsoleOutputCharacterW
SetLastError
IsBadWritePtr
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
GlobalAddAtomW
InterlockedExchange
TlsFree
VirtualAlloc
MultiByteToWideChar
lstrlenW
GetCommandLineA
GetSystemTimeAsFileTime
LocalLock
GetLastError
GetTickCount
FreeEnvironmentStringsA
EnterCriticalSection
GetCompressedFileSizeW
TlsSetValue
TlsAlloc
RemoveDirectoryW
GetCommandLineW
DeleteCriticalSection
GetModuleFileNameW
GetEnvironmentVariableW
GetCurrentProcess
UnhandledExceptionFilter

advapi32

RegOpenKeyExW
LookupAccountNameA

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0320d4442f5b52b9e3a6bd467b19bb2a

Headers

File Characteristics

Imports

user32

wininet

comdlg32

gdi32

kernel32

advapi32

Sections

.text Size: 153KB - Virtual size: 153KB

.data Size: 268KB - Virtual size: 267KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 153KB - Virtual size: 153KB

.data
Size: 268KB - Virtual size: 267KB

.rsrc
Size: 10KB - Virtual size: 9KB