622a82f297a3c4b132f34c059f12f027_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

622a82f297a3c4b132f34c059f12f027_JaffaCakes118
Size

140KB
MD5

622a82f297a3c4b132f34c059f12f027
SHA1

40adc8091f4433c62a106ab53f94f601a57853fc
SHA256

75ee3e9ce2e840525990ab81b8ecc4412b92bbc0ccad67c3f239eaf35da25a19
SHA512

db0626ce9030610b0b6acb6ae1ca7b8d35172039c0f78b67ffc818177faa7be06815e35b0bcfb48098584c27abad6e5619f049147dc45bc5b056ad16272040f0
SSDEEP

1536:JIhd0btWS5x857WdZHkbpP/CQQit0bcUruE4ldsOeECsTkcJM2WlPilqu1F:2SiWktQ+rluoCsTJJM2WlPan1F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
622a82f297a3c4b132f34c059f12f027_JaffaCakes118

Files

622a82f297a3c4b132f34c059f12f027_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de646369a190ff1e3327c5b9ff345e48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetPrivateProfileSectionA
SetEndOfFile
UnmapViewOfFile
VirtualFree
SetFilePointer
GetProcAddress
LoadLibraryA
GetModuleHandleA
InterlockedDecrement
CloseHandle
OpenMutexA
GetVolumeInformationA
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
GetLastError
CreateMutexA
WaitForSingleObject
CreateProcessA
GetACP
GetTickCount
WriteFile
CreateFileA
DeleteFileA
SetFileAttributesA
ReadFile
DeviceIoControl
GetModuleFileNameA
GetSystemTimeAsFileTime
lstrlenA
InterlockedIncrement
GetLocaleInfoW
GetFileSize
InterlockedExchange
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
EnterCriticalSection
LeaveCriticalSection
HeapFree
RtlUnwind
GetFileAttributesA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
HeapAlloc
VirtualQuery
HeapDestroy
HeapCreate
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
FlushFileBuffers
GetOEMCP
GetCPInfo
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
IsBadReadPtr
IsBadCodePtr
SetStdHandle
MultiByteToWideChar
VirtualProtect
GetSystemInfo

gdi32

GetTextCharsetInfo

wininet

HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetCrackUrlA
InternetOpenUrlA
DeleteUrlCacheEntry
InternetReadFile
InternetOpenA

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de646369a190ff1e3327c5b9ff345e48

Headers

File Characteristics

Imports

kernel32

gdi32

wininet

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 28KB - Virtual size: 24KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 28KB - Virtual size: 24KB