6f5aac11d0ab0975df0ac962a6ed4b2c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6f5aac11d0ab0975df0ac962a6ed4b2c_JaffaCakes118
Size

88KB
MD5

6f5aac11d0ab0975df0ac962a6ed4b2c
SHA1

e583d9c299a7326b3f6d8c8f7a3de596cf55c752
SHA256

d67037ba5d9d078c6a740cc32d31bbc3aedff63a0bdbbc2c88b92bb32cac0e13
SHA512

934f9ce778563872b3b456d448e36b28febbca6a3c1029aa78d98a06b3a48d7fe9e56ebde9a504bbf9f5ba31efc07c2207511b5dfc07fdaad021618f5946e598
SSDEEP

1536:LxS4CNOsZDT8qU0IcaoIiIYo+gdrG4tKPHDqisM:LofOq8G9aygZG4tKPHOiR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f5aac11d0ab0975df0ac962a6ed4b2c_JaffaCakes118

Files

6f5aac11d0ab0975df0ac962a6ed4b2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a5d983c70ff056119b61a13c10c360be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
SizeofResource
LoadResource
CreateFileA
LockResource
WriteFile
CloseHandle
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
lstrcpyn
GetEnvironmentVariableA
DeleteFileA
ReadFile
GetFileSize
FlushFileBuffers
IsBadReadPtr
GetModuleHandleA
SetStdHandle
GetStringTypeW
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetProcAddress
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

user32

GetDlgItem
wsprintfA
MessageBoxA
LoadIconA
SetWindowTextA
GetWindowTextA
EndDialog
SendMessageA
DialogBoxParamA

comctl32

ord17

msvfw32

GetOpenFileNamePreview

shlwapi

PathFileExistsA

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a5d983c70ff056119b61a13c10c360be

Headers

File Characteristics

Imports

kernel32

user32

comctl32

msvfw32

shlwapi

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 67KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 67KB

.rsrc
Size: 24KB - Virtual size: 23KB