5eb541b44a4173b19fe62a670ea9e2c9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5eb541b44a4173b19fe62a670ea9e2c9_JaffaCakes118
Size

140KB
MD5

5eb541b44a4173b19fe62a670ea9e2c9
SHA1

8f46252bee279fd310f5037da28b9ec25fe92543
SHA256

c4ad6e19b0eab2a9ceb270c7a1c7ffc228e826a112fc5a2a54b5f888179ef2c0
SHA512

f6d9ef8580d0cd416a7a8a964c19149da1f19425ddf36905ca54ffbbf9ff75ecfafc7e4ebe2250aecc30a4270128770629390c9eb76ac674243883084d5123f7
SSDEEP

1536:QVsDKxpjHkG/oRuT5NkjEfh68EoEglkZaekbHQyj6OGr:QVjLEG/oR1YEzohlIJkbHar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5eb541b44a4173b19fe62a670ea9e2c9_JaffaCakes118

Files

5eb541b44a4173b19fe62a670ea9e2c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45df3d43343813c4ca42f88e6164c2fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
CreateMutexA
ReadFile
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CreateFileA
SetFilePointer
FlushFileBuffers
GetLastError
LoadLibraryA
GetProcAddress
CloseHandle
GetCPInfo
FreeLibrary
SetStdHandle
IsBadCodePtr
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
RtlUnwind
CreateDirectoryA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
WriteFile
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
LCMapStringW

user32

PostQuitMessage
GetMessageA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
ShowWindow
SetWindowLongA
CreateWindowExA
DefWindowProcA
DispatchMessageA
TranslateMessage

advapi32

RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA

shell32

SHGetSpecialFolderPathA

wininet

InternetOpenA
InternetCloseHandle
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA

ws2_32

inet_addr

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45df3d43343813c4ca42f88e6164c2fe

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wininet

ws2_32

iphlpapi

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 72KB - Virtual size: 77KB

.rsrc Size: 32KB - Virtual size: 30KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 72KB - Virtual size: 77KB

.rsrc
Size: 32KB - Virtual size: 30KB