6fc7992d6aa8c89bb94a384ad0b1ec4b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6fc7992d6aa8c89bb94a384ad0b1ec4b_JaffaCakes118
Size

207KB
MD5

6fc7992d6aa8c89bb94a384ad0b1ec4b
SHA1

4996b5cb32506695fd23a0f96a46204b81a05c45
SHA256

9ef60eb72fd3f8c122116a73cf2bc024c451c6e9d275daf700d0cf25bed41f12
SHA512

86b31f6414c09e8b3b5b4244f24b7f23a1e92a9dba41496a847d43d714014122ef41605faf24b5036bf3c436a289290738cedffd57cbe2ee5d6206c13ab4d795
SSDEEP

3072:5zBGS7M43DrFDZHA8l1P9qZOzawEpoGboHUC0qW+7af5h90RXKbsLyiz:5lNVVAoEZOzahzCY5h97bg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc7992d6aa8c89bb94a384ad0b1ec4b_JaffaCakes118

Files

6fc7992d6aa8c89bb94a384ad0b1ec4b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c66e43b08426c74df94d06421186320f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
IsProcessorFeaturePresent
EnterCriticalSection
GetTickCount
HeapCreate
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
VirtualQuery

user32

EndPaint
GetMessageA
SetTimer
GetWindowRect
PostQuitMessage
FillRect
KillTimer
GetClipCursor
GetClientRect
BeginPaint
GetDC
TranslateMessage
OffsetRect
ReleaseDC
DefWindowProcA
GetDesktopWindow
SetWindowPos
GetCaretPos
DispatchMessageA
FindWindowA

gdi32

MoveToEx
SelectClipPath
GetTextExtentPoint32A
SetViewportOrgEx
LineTo
CreateFontIndirectA
DeleteObject
SelectObject
EndPath
EnumFontFamiliesA
Polyline
SetROP2
SetTextAlign
GetStockObject
TextOutA
BeginPath

comdlg32

ChooseFontA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c66e43b08426c74df94d06421186320f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 164KB - Virtual size: 167KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 164KB - Virtual size: 167KB

.rsrc
Size: 9KB - Virtual size: 9KB