6ef970f479abfb9e0650e5111b79efd0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6ef970f479abfb9e0650e5111b79efd0_JaffaCakes118
Size

488KB
MD5

6ef970f479abfb9e0650e5111b79efd0
SHA1

b461209c02a36910f7a1afe9596337553b88ab63
SHA256

77e89338e8a811693c4a59ef9d7248ee71938eda1fb4db0a49a382cf83b8900c
SHA512

eb1b2b62b631c4f673a010a3dca85ac4e2499601dc6ac42517572cd49f816bce222085de8903d73b82ed28205035a17cd2b9ad10fcb9583396c720ddc59221c8
SSDEEP

12288:B9IslWNznK4bQqBOpmRAh8FfYBukTcKdSuI:cNzv8qBOpmRbfuhVYH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ef970f479abfb9e0650e5111b79efd0_JaffaCakes118

Files

6ef970f479abfb9e0650e5111b79efd0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e395394e0eac8eaf8f2657b465d07fb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

CheckEscapesW
SHBrowseForFolder

comctl32

InitCommonControlsEx

kernel32

HeapCreate
UnhandledExceptionFilter
InterlockedDecrement
FlushFileBuffers
VirtualQuery
SetUnhandledExceptionFilter
EnumResourceLanguagesW
GetStringTypeW
GetVersionExA
HeapSize
EnumSystemLocalesA
LCMapStringA
GetOEMCP
GetConsoleOutputCP
CompareStringA
TlsFree
LeaveCriticalSection
TlsAlloc
GetLocaleInfoW
GetFileType
CreateFileA
HeapLock
HeapAlloc
GetEnvironmentStrings
CreateMutexA
SetStdHandle
GetStringTypeA
IsDebuggerPresent
GetCommandLineW
VirtualProtectEx
TerminateProcess
TlsSetValue
WritePrivateProfileSectionW
GetTimeZoneInformation
IsValidLocale
TlsGetValue
HeapReAlloc
SetConsoleCtrlHandler
HeapFree
VirtualFree
VirtualAlloc
GetSystemTimeAsFileTime
GetTickCount
ReadConsoleOutputCharacterA
GetCPInfo
SetFilePointer
SetEnvironmentVariableA
HeapDestroy
GetEnvironmentStringsW
IsValidCodePage
EnterCriticalSection
OpenMutexA
GetCurrentProcessId
LCMapStringW
RtlUnwind
WideCharToMultiByte
InterlockedExchange
CreateEventW
GetCommandLineA
GetTimeFormatA
GetStdHandle
GetUserDefaultLCID
SetHandleCount
InitializeCriticalSection
FreeEnvironmentStringsW
GetProcAddress
LoadLibraryA
Sleep
GetModuleFileNameA
CompareStringW
GetStartupInfoW
InterlockedIncrement
GetModuleHandleA
ReadFile
WriteConsoleW
GetConsoleCP
DeleteCriticalSection
GetStartupInfoA
GetLastError
FreeEnvironmentStringsA
WriteFile
MultiByteToWideChar
GetACP
ExitProcess
QueryPerformanceCounter
GetDateFormatA
WriteConsoleA
GetCurrentThreadId
FreeLibrary
GetCurrentProcess
SetLastError
GetConsoleMode
GetLocaleInfoA
GetModuleFileNameW
GetCurrentThread
CloseHandle
GetProcessHeap

gdi32

SetDIBits
GetEnhMetaFileW
BeginPath
UpdateICMRegKeyW
DrawEscape
ArcTo
EnumFontFamiliesExA
CopyMetaFileW
SetICMProfileW
SetViewportOrgEx
CloseMetaFile
SetBoundsRect
PolyTextOutW
GetOutlineTextMetricsW

wininet

InternetGetCookieW
CommitUrlCacheEntryW
InternetTimeToSystemTimeW

user32

ScrollDC
RegisterClassExA
DefWindowProcA
TabbedTextOutW
EndTask
PostThreadMessageW
IsMenu
SetWindowWord
CreateWindowStationA
SetTimer
EnableScrollBar
DrawEdge
GetMenuCheckMarkDimensions
MapVirtualKeyExW
RegisterClassA
EnumDisplaySettingsExA
GetUserObjectSecurity
LoadCursorW
IsIconic
LockWindowUpdate
SubtractRect
SendIMEMessageExA
SetDeskWallpaper
CreateIcon
GetKeyboardLayoutNameW
GetProcessDefaultLayout

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e395394e0eac8eaf8f2657b465d07fb8

Headers

File Characteristics

Imports

shell32

comctl32

kernel32

gdi32

wininet

user32

Sections

.text Size: 152KB - Virtual size: 152KB

.rdata Size: 10KB - Virtual size: 23KB

.data Size: 313KB - Virtual size: 313KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 152KB - Virtual size: 152KB

.rdata
Size: 10KB - Virtual size: 23KB

.data
Size: 313KB - Virtual size: 313KB

.rsrc
Size: 11KB - Virtual size: 10KB