6f8145265b655d7d2284b1a85f1bc0a2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6f8145265b655d7d2284b1a85f1bc0a2_JaffaCakes118
Size

86KB
MD5

6f8145265b655d7d2284b1a85f1bc0a2
SHA1

706afa829aac4a662bdc2c79d12ba37103cbd2e3
SHA256

5b6df2854e1d744698791d1adc55dc835318c17a334705d00b110e5bac5f0e78
SHA512

4984800b536fa464c60ba3916906c4df064bfe44a4e6c6731faa39cca4294c1a89fd2d5c5c5cea3d994ed05c4527ee30ac8850eb4d9d930be2ffa5e663b4fbd6
SSDEEP

1536:tp+Hm5awdxs5xfDh+v1h3/pFGtr8VXskVxShaNsYi7lPQkIzwQk:toHBkG5VEre8VFjSh9DlPQkIC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f8145265b655d7d2284b1a85f1bc0a2_JaffaCakes118

Files

6f8145265b655d7d2284b1a85f1bc0a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8290d23850e7edc26a4a1e72e36da00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
ResumeThread
WriteProcessMemory
HeapValidate
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: 47KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

10
Size: 9KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b8290d23850e7edc26a4a1e72e36da00

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 18KB - Virtual size: 28KB

1 Size: 1024B - Virtual size: 536B

2 Size: - Virtual size: 42KB

3 Size: 1024B - Virtual size: 2KB

4 Size: - Virtual size: 8B

5 Size: 512B - Virtual size: 24B

6 Size: - Virtual size: 1KB

7 Size: 5KB - Virtual size: 5KB

8 Size: 47KB - Virtual size: 73KB

9 Size: 3KB - Virtual size: 3KB

10 Size: 9KB - Virtual size: 34KB

0
Size: 18KB - Virtual size: 28KB

1
Size: 1024B - Virtual size: 536B

2
Size: - Virtual size: 42KB

3
Size: 1024B - Virtual size: 2KB

4
Size: - Virtual size: 8B

5
Size: 512B - Virtual size: 24B

6
Size: - Virtual size: 1KB

7
Size: 5KB - Virtual size: 5KB

8
Size: 47KB - Virtual size: 73KB

9
Size: 3KB - Virtual size: 3KB

10
Size: 9KB - Virtual size: 34KB