5ed5202cbf74d6d2c3b934eb8f20e736_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5ed5202cbf74d6d2c3b934eb8f20e736_JaffaCakes118
Size

998KB
MD5

5ed5202cbf74d6d2c3b934eb8f20e736
SHA1

f25c54336551552302953f11f5fa22f218871530
SHA256

116eb099d3e10a126344c1bfd4d69deb73642c23e7882f607a3f7826b110a76d
SHA512

0c7f99ab5d29ea32a06dbcab72d13d5a2f82c6ce9311aa53fd912a8fc8792408f21eec1ada1a908b2f486c9f60f576ac366a48f9eddb6134441b9066935688f7
SSDEEP

12288:QArEFX2wJYCYYc+ruZUMLdOE5jrCUX2UiUhvtGENlyMib93MkEK3fjVRZAZhRw5a:8X2gAG4rpiqLyB9jVRqWAwSb5R8zSl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ed5202cbf74d6d2c3b934eb8f20e736_JaffaCakes118

Files

5ed5202cbf74d6d2c3b934eb8f20e736_JaffaCakes118
.exe windows:5 windows x86 arch:x86

009ed71c9c5382fba6d938593013d0a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imagehlp

ImageGetDigestStream
ImageDirectoryEntryToData
ImageNtHeader
ImageRvaToVa

kernel32

FreeLibrary
GetLocaleInfoA
RemoveDirectoryA
FindClose
GetOEMCP
ReadFile
GetModuleHandleW
EndUpdateResourceW
LoadLibraryExA
GetSystemDirectoryA
InterlockedCompareExchange
InterlockedDecrement
CopyFileA
GetEnvironmentVariableA
FreeResource
GetACP
GetVersion
GlobalFree
BeginUpdateResourceW
GetFullPathNameW
DebugBreak
LocalFree
FindNextFileW
InterlockedExchange
RemoveDirectoryW
ExitProcess
lstrlenA
GetFileAttributesA
RaiseException
lstrcmpiA
UpdateResourceW
CloseHandle
GetFullPathNameA
SetFilePointer
IsDebuggerPresent
GetFileAttributesW
GetVersionExW
GetThreadLocale
OutputDebugStringA
GetFileInformationByHandle
GlobalAlloc
CopyFileW
lstrlenW
LoadLibraryExW
lstrcpyA
InterlockedIncrement
WideCharToMultiByte

user32

wsprintfW
CharNextW
CharNextA

ole32

CoUninitialize
CoCreateInstance
CLSIDFromString
CoInitialize
StringFromCLSID
StringFromIID
CoTaskMemFree

msvfw32

ICGetInfo
ICRemove

msvcrt

_initterm
__winitenv
vwprintf
strchr
atoi
wcsrchr
_onexit
_iob
__wgetmainargs
qsort
exit
__p__commode
_exit
?terminate@@YAXXZ
_XcptFilter
??1type_info@@UAE@XZ
_except_handler3
_wcsnicmp
__CxxFrameHandler
_purecall
??2@YAPAXI@Z
__setusermatherr
_cexit
free
_adjust_fdiv
_controlfp
_snprintf
_itoa
strncmp
__dllonexit
??3@YAXPAX@Z
_itow
wcsstr
_c_exit
fputs
realloc
wcslen
_CxxThrowException
__p__fmode
_vsnprintf
_snwprintf
_wcsicmp
memset
_vsnwprintf
__set_app_type
_wcslwr
iswspace

shell32

CommandLineToArgvW

Sections

.text
Size: 706KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

009ed71c9c5382fba6d938593013d0a5

Headers

File Characteristics

Imports

imagehlp

kernel32

user32

ole32

msvfw32

msvcrt

shell32

Sections

.text Size: 706KB - Virtual size: 705KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 251KB - Virtual size: 250KB

.rsrc Size: 37KB - Virtual size: 3.2MB

.text
Size: 706KB - Virtual size: 705KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 251KB - Virtual size: 250KB

.rsrc
Size: 37KB - Virtual size: 3.2MB