5c84c5df387995cee24310c5413e349e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5c84c5df387995cee24310c5413e349e_JaffaCakes118
Size

224KB
MD5

5c84c5df387995cee24310c5413e349e
SHA1

23cd72d104bb509764a30035280ae8fefda48695
SHA256

2d1f5edbbf47adb4403bf9d506c723bfbec1b59a8464de79c3683d32204ab206
SHA512

a48070e155c488b7a2786b8920561e68627d8727916cf9fa4c3d686535b6a6d6176d6cc632d0e0afeadd7627139321216d3f4efd8befc0b2ed41b257f51484d9
SSDEEP

3072:rtVIV8ldER4fQMNYleZfBv7EI1ru4uo0NdefJuk/Tz7MgAP2x+6OHKJtweM:rPER4IMNYleZfBv7EIuMxXnMrPoCEel

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c84c5df387995cee24310c5413e349e_JaffaCakes118

Files

5c84c5df387995cee24310c5413e349e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e35e85f26450b43f37dc90bc7cf5e7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualLock
IsBadCodePtr
LoadLibraryA
VirtualProtect
OpenSemaphoreA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
GlobalLock
ResetEvent
VirtualAllocEx
GetLocaleInfoA
VirtualFree
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
FileTimeToSystemTime
GetLastError
HeapFree
GetStringTypeW
GetSystemDirectoryA
GetCPInfo
GetOEMCP
GetACP
HeapCreate
GetSystemInfo
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

GetTopWindow
LoadCursorA
GetDesktopWindow
FindWindowA
GetCursorPos
LoadIconA
SetTimer
ReleaseDC
CreateIcon
IsIconic
SetCursorPos
GetWindowRect
SetCursor
LoadAcceleratorsA
ShowWindow
GetWindow
GetDC

gdi32

GetBrushOrgEx
CreateHatchBrush
GetPixel
SelectObject

shell32

ord195
SHGetFolderLocation

psapi

GetWsChanges
GetProcessMemoryInfo
GetModuleBaseNameA
GetModuleInformation

msvfw32

DrawDibOpen

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e35e85f26450b43f37dc90bc7cf5e7d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

psapi

msvfw32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 36KB - Virtual size: 34KB

.rsrc Size: 156KB - Virtual size: 153KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 36KB - Virtual size: 34KB

.rsrc
Size: 156KB - Virtual size: 153KB