6f6b36802099ba138fff30b9136ed2d1_JaffaCakes118

General

Target

6f6b36802099ba138fff30b9136ed2d1_JaffaCakes118
Size

48KB
MD5

6f6b36802099ba138fff30b9136ed2d1
SHA1

803a7271b1228d2ef52341ad417aa88475565331
SHA256

b075fec50dffb13f5d9ef5e83b170b007a6f20746110e34934c0f1ad9cfa84ad
SHA512

e06096c880bc1547a74ac10672d74cbef25cbb9a30a9ec9ef2a51828efcfcba2faf06cb70c7748287d1d9322c04ae2f5142e9826ed7dfcfbdf06a1004525e607
SSDEEP

768:uDDKaAub9QVQB5LNuN4BvDpx91jxHUaMaBjVh9XA9oDQ5AQlP:U2albUo5LNo4Zp1jxHXDyt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f6b36802099ba138fff30b9136ed2d1_JaffaCakes118

Files

6f6b36802099ba138fff30b9136ed2d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

678c0bc27c87605cb98913966d6dd60a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
SleepEx
GetTickCount
FlushFileBuffers
HeapSize
GetSystemInfo
VirtualProtect
GetLocaleInfoA
SetStdHandle
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RaiseException
SetFilePointer
HeapAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
CloseHandle

user32

wsprintfA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shlwapi

SHSetValueA
SHGetValueA

netapi32

Netbios

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

678c0bc27c87605cb98913966d6dd60a

Headers

File Characteristics

Imports

kernel32

user32

wininet

shlwapi

netapi32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 8KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 8KB