6f9723548bfb7a5fa96bd20006cbb4cc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6f9723548bfb7a5fa96bd20006cbb4cc_JaffaCakes118
Size

323KB
MD5

6f9723548bfb7a5fa96bd20006cbb4cc
SHA1

86a57b3505886dcfad4b74867620a70a64d948db
SHA256

83a1289167c56483988726d108b90d90c6992e98ecd7105ec953aa8cce47a88b
SHA512

fd04e93d5c37d48a4c0d30166637593727f06f6ea91403724cc533a5987611ac2c65690b004450a8a4e98a78f03fadfcc5197ad4540df55c842e77f6aac178bd
SSDEEP

6144:PiUSVBn/IckzHkhuTaj0p24FUCy9srO8YzTCE5AyU/+W:PYJwTzH0lbSUt9YYnPl0x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f9723548bfb7a5fa96bd20006cbb4cc_JaffaCakes118

Files

6f9723548bfb7a5fa96bd20006cbb4cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f69107bde4a6c77bfed5f5d43c86869

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CloseDesktop
GetMenuItemID
ShowCursor
CharUpperBuffW
IsCharLowerW
RegisterClassA
DdeGetLastError
CharPrevExA
TranslateMDISysAccel
EndDialog
EnumDisplaySettingsA
PostMessageA
RegisterClassExA
CopyImage
GetWindowModuleFileNameA
AdjustWindowRectEx
EnumWindowStationsA
GetCaretPos
IsWindowEnabled
SetScrollPos

kernel32

GetLocaleInfoA
GetCurrentThreadId
UnhandledExceptionFilter
GetUserDefaultLCID
TlsAlloc
GetCurrentThread
GetStringTypeA
GetLastError
TlsFree
EnumSystemLocalesA
HeapFree
GetSystemTimeAsFileTime
OpenMutexA
CompareStringW
HeapSize
InterlockedIncrement
LoadLibraryA
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
WriteFile
TlsSetValue
HeapAlloc
SetLastError
VirtualQuery
GetStringTypeW
ContinueDebugEvent
FreeLibrary
FreeEnvironmentStringsA
GetCurrentProcess
GetConsoleMode
GetOEMCP
GetTimeFormatA
GetVersionExA
GetEnvironmentStrings
LCMapStringA
CompareStringA
MultiByteToWideChar
ReadFile
GetACP
SetEnvironmentVariableA
EnterCriticalSection
HeapCreate
IsValidLocale
ExitProcess
GetCPInfo
WideCharToMultiByte
InitializeCriticalSection
GetLocaleInfoW
InterlockedExchange
HeapDestroy
SetConsoleCtrlHandler
LCMapStringW
GetProcAddress
TlsGetValue
RtlUnwind
GetFileType
WriteConsoleA
QueryPerformanceCounter
HeapReAlloc
GetConsoleCP
VirtualAlloc
CreateMutexA
InterlockedDecrement
GetDateFormatA
SetFilePointer
GetStartupInfoA
SetStdHandle
FlushFileBuffers
IsDebuggerPresent
SetHandleCount
CloseHandle
GetModuleFileNameA
GetCurrentProcessId
FreeEnvironmentStringsW
GetConsoleOutputCP
GetModuleHandleA
SetUnhandledExceptionFilter
GetCommandLineA
GetProcessHeap
WriteConsoleW
GetTickCount
Sleep
TerminateProcess
GetEnvironmentStringsW
CreateFileA
IsValidCodePage
GetTimeZoneInformation
GetStdHandle

comctl32

InitCommonControlsEx

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f69107bde4a6c77bfed5f5d43c86869

Headers

File Characteristics

Imports

user32

kernel32

comctl32

Sections

.text Size: 159KB - Virtual size: 159KB

.rdata Size: 9KB - Virtual size: 13KB

.data Size: 148KB - Virtual size: 147KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 159KB - Virtual size: 159KB

.rdata
Size: 9KB - Virtual size: 13KB

.data
Size: 148KB - Virtual size: 147KB

.rsrc
Size: 5KB - Virtual size: 5KB