73647b472cb4a89de51ea04da3eacc5c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

73647b472cb4a89de51ea04da3eacc5c_JaffaCakes118
Size

248KB
MD5

73647b472cb4a89de51ea04da3eacc5c
SHA1

6001f65c8f2e9760a284d4dbe92a1d7052290276
SHA256

2a0b90bbbfad55924b78fe6c3a0ba654a88bd8e5f89a1e099cfe10b4dffef1b2
SHA512

75498fd57bdbbacaa21c070b55a7f16e02b2c8bb8e7646a0f26804af1dfaaa97c02deed81ee2a01ef3c6667ee84d73fa6fe86794dee4e66a2ba4ea6b4eebf0bd
SSDEEP

3072:kfDvCWjBfGAtWDp3eVBnaUshPNQ7EwFa6zTRQPy3lGlHD7tKtf1hdiYJNNUcnBVx:oNBltWFrt4SPyElHVuPUYJNlBVAPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73647b472cb4a89de51ea04da3eacc5c_JaffaCakes118

Files

73647b472cb4a89de51ea04da3eacc5c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

34ca9abd541789b769117632b1ae82a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryA
GetModuleHandleA
GetVersion
FlushFileBuffers
GetVersionExA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
GetCurrentProcess
FindClose
FindNextFileA
FindFirstFileA
GetTickCount
CompareStringW
CompareStringA
SetFilePointer
LeaveCriticalSection
IsBadCodePtr
VirtualAlloc
VirtualFree
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
HeapReAlloc
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
ExitProcess
SetLastError
SetEnvironmentVariableA
TlsFree
TlsAlloc
GetCommandLineA
MoveFileA
RaiseException
GetSystemTimeAsFileTime
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitThread
HeapDestroy
HeapCreate
HeapFree
HeapAlloc
OutputDebugStringA
GetCurrentProcessId
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
IsBadReadPtr
IsBadWritePtr
lstrlenA
InterlockedDecrement
DeleteFileA
CopyFileA
SetFileTime
ReadFile
GetTempPathA
GetTempFileNameA
GetFileTime
WriteFile
CreateFileA
GetFileSize
GetFileInformationByHandle
GetCurrentThreadId
EnterCriticalSection
TlsGetValue
TlsSetValue
CreateThread
DeleteCriticalSection
InitializeCriticalSection
GetDiskFreeSpaceA
GetLastError
SetEvent
InterlockedIncrement
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
ResumeThread
WaitForSingleObject
SetStdHandle
CloseHandle

user32

IsWindow
SetWindowLongA
PostMessageA
DestroyWindow
UnregisterClassA
DispatchMessageA
TranslateMessage
GetMessageA
LoadCursorA
SetCursor
KillTimer
GetCursorPos
wsprintfA
GetWindowLongA
DefWindowProcA
RegisterClassA
CreateWindowExA

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

Exports

Exports

GetComputerInfo9x
GetUserInfo9x
IAlloc

Sections

.text
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34ca9abd541789b769117632b1ae82a0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 172KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 32KB - Virtual size: 31KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 176KB - Virtual size: 172KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 32KB - Virtual size: 31KB

.reloc
Size: 8KB - Virtual size: 7KB