6ef0dfeb5880b45437622f777da92bf9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6ef0dfeb5880b45437622f777da92bf9_JaffaCakes118
Size

597KB
MD5

6ef0dfeb5880b45437622f777da92bf9
SHA1

9d462b22d85018a280329b3e4be68ffcc2b489bf
SHA256

1ac0916362c9bdfba2d12955500f64d78cd1a648d06e5773510bd506ca929363
SHA512

d38c388beac229e4f523f05562251ecde25c9723d94ee09c0440788debfe9d729098f6c6d02de228725ec0e7100ed4fe2455038f03537ee531ffff05139935ab
SSDEEP

12288:FK183LhPkLjrztF+vMKFaKcDlHRhXOydUUIudTTLwz/MUoUx6L1p:Fg80jrzz+vMfh9Rh+ydUUvTQMxmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ef0dfeb5880b45437622f777da92bf9_JaffaCakes118

Files

6ef0dfeb5880b45437622f777da92bf9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

13a787dbac787f441d66af7af63db931

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LoadLibraryA
GetStartupInfoA
GetConsoleCP
GetTickCount
GetModuleHandleA
GetProcAddress

user32

SetForegroundWindow
DefWindowProcA
SendMessageA
IsIconic
KillTimer
SetTimer
LoadIconA
FindWindowA
PostMessageA
GetLastActivePopup
EnableWindow
IsWindow

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

_onexit
exit
__dllonexit
__getmainargs
__p__commode
_controlfp
__CxxFrameHandler
__p__fmode
__set_app_type
sscanf
__setusermatherr
_setmbcp
_mbscmp
_initterm
_exit
_adjust_fdiv
_acmdln
_XcptFilter
_except_handler3

oleacc

ObjectFromLresult

esent

JetMove

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.55
Size: - Virtual size: 185KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aa
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bb
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cc
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zf
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ass
Size: 512B - Virtual size: 31B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asshole
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13a787dbac787f441d66af7af63db931

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

oleacc

esent

Sections

.text Size: 164KB - Virtual size: 163KB

.55 Size: - Virtual size: 185KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 824B

.aa Size: 316KB - Virtual size: 316KB

.bb Size: 162KB - Virtual size: 162KB

.cc Size: 512B - Virtual size: 37B

.zf Size: 3KB - Virtual size: 3KB

.ass Size: 512B - Virtual size: 31B

.asshole Size: 170KB - Virtual size: 170KB

.rsrc Size: 1024B - Virtual size: 720B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 164KB - Virtual size: 163KB

.55
Size: - Virtual size: 185KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 824B

.aa
Size: 316KB - Virtual size: 316KB

.bb
Size: 162KB - Virtual size: 162KB

.cc
Size: 512B - Virtual size: 37B

.zf
Size: 3KB - Virtual size: 3KB

.ass
Size: 512B - Virtual size: 31B

.asshole
Size: 170KB - Virtual size: 170KB

.rsrc
Size: 1024B - Virtual size: 720B

.reloc
Size: 2KB - Virtual size: 2KB