8b36938b14b11a4c9b8e00fbc4e4c0ba_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8b36938b14b11a4c9b8e00fbc4e4c0ba_JaffaCakes118
Size

122KB
MD5

8b36938b14b11a4c9b8e00fbc4e4c0ba
SHA1

140eb14779f77770fbcad5ad4ee06c01e2039d38
SHA256

aeee1bbe9ac879fbaeee5cf451ca855117cf36f44af49f47e5912f72b5df8249
SHA512

d160d94e4fc904952fa135468e5c027db94e7fba50a6f86eec831803db661a08cbf2acec7357f949573c21ba1dfefe890774546841a75f7e21189d9eb06e2772
SSDEEP

1536:4v9iYD3MJJGKDBtDNTUO+hIwnhGF6duzhEvYyhV1VFLX99HWR3q3V+zlDWYhFT:4vcYYjTUO/wfdudEwiVR7WIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b36938b14b11a4c9b8e00fbc4e4c0ba_JaffaCakes118

Files

8b36938b14b11a4c9b8e00fbc4e4c0ba_JaffaCakes118
.exe windows:1 windows x86 arch:x86

bdd13c18db0755795f3320fa7598f0f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateFileA
GetCurrentThreadId
DeleteFileA
EnterCriticalSection
ExitProcess
CloseHandle
FindFirstFileA
FindNextFileA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
CreateProcessA
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
FindClose
GetStdHandle
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
GetStartupInfoA

user32

MessageBoxA
EnumThreadWindows

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook

Sections

CODE
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

TLS
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdd13c18db0755795f3320fa7598f0f0

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

CODE Size: 54KB - Virtual size: 56KB

DATA Size: 10KB - Virtual size: 24KB

TLS Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 4KB

.debug Size: 51KB - Virtual size: 52KB

CODE
Size: 54KB - Virtual size: 56KB

DATA
Size: 10KB - Virtual size: 24KB

TLS
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB

.debug
Size: 51KB - Virtual size: 52KB