5f2f75b29ebdafe290231a4ed8c407f1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5f2f75b29ebdafe290231a4ed8c407f1_JaffaCakes118
Size

517KB
MD5

5f2f75b29ebdafe290231a4ed8c407f1
SHA1

f12f08bd5dbfaf1355dec0b7bc46b663e906e18a
SHA256

f7545f9da1af7ada595401847cc2ea14957ba6eca0e70a71e225f064868431b2
SHA512

b7f036c82033a4b124784e7ad957afd9fc7dc53cf5b3e02b1e8fd9a7cf0ad0efa61a9af9c05ce931d3fb904a7d275dc3b2a57b9c7aad886696995c004fd356a6
SSDEEP

12288:BQf/qHm2syQakpk/pIAXszLnm6d7ViCDePPc1ohQmi9two4z7MuL:BQfiHmtHXk/6Acvnm6d5iCPohmb4z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f2f75b29ebdafe290231a4ed8c407f1_JaffaCakes118

Files

5f2f75b29ebdafe290231a4ed8c407f1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

26b42c10c170af6dd28dc98c5440af7a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
GlobalUnfix
GetPrivateProfileSectionNamesA
SetSystemPowerState
SetDefaultCommConfigA
SetStdHandle
InterlockedDecrement
GetSystemTimeAdjustment
CompareFileTime
Sleep
CallNamedPipeA
SizeofResource
GetPriorityClass
_lcreat
FreeLibraryAndExitThread
LoadLibraryW
BuildCommDCBAndTimeoutsA
GetProcAddress
lstrcpyA
LocalAlloc
ExitProcess
SetFilePointerEx
CopyFileW
SetEnvironmentVariableW
GetCurrentDirectoryA
SetCommState
GetOEMCP
SetUnhandledExceptionFilter
FindAtomW
WaitForMultipleObjects
CreateSemaphoreW
SetFileApisToANSI
EnumResourceNamesA
ConnectNamedPipe
GetPrivateProfileStructA
SetLocalTime
SetLastError
GetModuleHandleW
SearchPathA
GetFileAttributesW
lstrlenW
IsBadWritePtr
RaiseException
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
InterlockedIncrement
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
CloseHandle
CreateFileA
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
WriteConsoleA
GetConsoleOutputCP

Exports

Exports

_fourthSoldier@4
_gekkon@4
_gifgeek@8
_thirdSoldier@8

Sections

.text
Size: 464KB - Virtual size: 463KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26b42c10c170af6dd28dc98c5440af7a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 464KB - Virtual size: 463KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 8KB - Virtual size: 4.6MB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 464KB - Virtual size: 463KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 8KB - Virtual size: 4.6MB

.rsrc
Size: 7KB - Virtual size: 6KB