83adafcdec1343f5457a977f9c106bb7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

83adafcdec1343f5457a977f9c106bb7_JaffaCakes118
Size

3.9MB
MD5

83adafcdec1343f5457a977f9c106bb7
SHA1

b65d3263ce54cadca6291cfdbbe6d050849a79d8
SHA256

b2a2b59a060318190473861c1e121de05e45e45218c977147e6f3cf3a32c8176
SHA512

5220e854b147e14301ad0af57193da4bafa37f9918988934dc6167044da38a583ea0740216a9682f812de5a6bb05d741ef9c106145fbacec2aa534bb104acd41
SSDEEP

98304:tJEmPUziUD6vKv9qZfxHmb0llzeiifR7HaCVu4l:tJcRDc6E9ei8RGCVu8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83adafcdec1343f5457a977f9c106bb7_JaffaCakes118

Files

83adafcdec1343f5457a977f9c106bb7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f0841049781455e1b3d73692fce7be29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
LoadResource
HeapAlloc
GetCurrentProcess
ZombifyActCtx
GetTickCount
FindNextVolumeMountPointA
MapUserPhysicalPagesScatter
GetTimeFormatW
HeapValidate
lstrlenA
ExitThread
CreateJobObjectA
GetConsoleAliasesW
GetHandleInformation
LocalAlloc
SetConsoleCtrlHandler
VirtualProtect
lstrcpyW
LocalFileTimeToFileTime
SetConsoleCursorPosition
FindResourceA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
IsBadReadPtr
RaiseException
RtlUnwind
TerminateProcess
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile
CloseHandle
CreateFileA
GetModuleHandleA

gdi32

GetBoundsRect

winhttp

WinHttpAddRequestHeaders

Exports

Exports

Smoke

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0841049781455e1b3d73692fce7be29

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

winhttp

Exports

Exports

Sections

.text Size: 3.8MB - Virtual size: 3.8MB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 10KB - Virtual size: 197KB

.rsrc Size: 29KB - Virtual size: 4.1MB

.text
Size: 3.8MB - Virtual size: 3.8MB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 10KB - Virtual size: 197KB

.rsrc
Size: 29KB - Virtual size: 4.1MB