3d8277eae29afe5fa91180fc938f4b3c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3d8277eae29afe5fa91180fc938f4b3c_JaffaCakes118
Size

758KB
MD5

3d8277eae29afe5fa91180fc938f4b3c
SHA1

02770a9b83cd8c82c70814d5b72041e240d3bed1
SHA256

f2f03b4d660d6c9ea2aa67e9be35f6ab4c4e5daf9673622b645e29fb85c7faf4
SHA512

bbd37e220d0d6c350e9fc3c38c33dce4aa8af4c5be7708a375b80f821ca0eb9c8248335b964f734793bbd10a0cf32462f955d531920cc747f7816fbb93333c0f
SSDEEP

12288:5dtnqYk9TmLe+TBshw02+xodZ2iSjD5cdrLbVrBpFpQcBJBgqZDE0OF:5d1qYESNTBI1xoPrPVrBpFpDXgqZi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
3d8277eae29afe5fa91180fc938f4b3c_JaffaCakes118

Files

3d8277eae29afe5fa91180fc938f4b3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

074d21702eb0f24544f6a60dcf6d0d92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc

kernel32

VirtualAlloc
SetEndOfFile
GetModuleFileNameA
GlobalFree
VirtualProtect
GetDriveTypeA
FindFirstChangeNotificationA
GetCurrentProcessId
GetLocalTime
SetSystemTimeAdjustment
GlobalUnlock
FindNextChangeNotification
GetFileTime
IsBadReadPtr
QueryPerformanceFrequency
GlobalAlloc
FindCloseChangeNotification
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
RtlUnwind
RaiseException
GetProcAddress
GetModuleHandleA
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
ReadFile
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
HeapSize
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CreateFileA
CreateFileW

Sections

.text
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

074d21702eb0f24544f6a60dcf6d0d92

Headers

File Characteristics

Imports

ole32

kernel32

Sections

.text Size: 330KB - Virtual size: 330KB

.rdata Size: 276KB - Virtual size: 276KB

.data Size: 5KB - Virtual size: 58KB

.rsrc Size: 135KB - Virtual size: 134KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 330KB - Virtual size: 330KB

.rdata
Size: 276KB - Virtual size: 276KB

.data
Size: 5KB - Virtual size: 58KB

.rsrc
Size: 135KB - Virtual size: 134KB

.reloc
Size: 10KB - Virtual size: 9KB