8b962f917a875515fbe5f0db40a1b17d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8b962f917a875515fbe5f0db40a1b17d_JaffaCakes118
Size

274KB
MD5

8b962f917a875515fbe5f0db40a1b17d
SHA1

8cc96e9e9299746c58b1e5822fd4318118558f83
SHA256

3c6ff86faeedc4f7041f71daef5df2ee5b252fc9a4ebb31799e514b42cb74997
SHA512

fe2377b6f90680ace5c86563594f18a6e6deea794db55ce508d5663fca63f742377c8ebd45b1dcfd2cc45984f5eabe37736687a9b708c62969bbdb51be1d229b
SSDEEP

3072:ISq1px63JfSQwvxuYZaR53gHvjVNKWJBkRzRRPPpN+/1uC/kitEH:Mn75ZEQPjVNK04zRRPxqN/kr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b962f917a875515fbe5f0db40a1b17d_JaffaCakes118

Files

8b962f917a875515fbe5f0db40a1b17d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac697dde28eb52e1124bd0a7e45b9c67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
ExitProcess
Sleep
lstrcpyA
lstrlenA
SetLastError
DeleteFileA
GetLastError
lstrcatA
ReadFile
SetFilePointer
CreateFileA
GetFileAttributesA
MultiByteToWideChar
GetModuleFileNameA
lstrcmpiA
GetWindowsDirectoryA
WinExec
GetVersionExA
SetUnhandledExceptionFilter
ReleaseMutex
GetCommandLineA
CreateDirectoryA
CreateMutexA
GetCurrentThreadId
HeapFree
HeapAlloc
GetProcessHeap
WriteFile
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetModuleHandleA
CloseHandle
SetStdHandle
IsBadCodePtr
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
FindClose
FindFirstFileA
GetVolumeInformationA
lstrcpynA
GetFullPathNameA
GetFileSize
GetFileTime
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcmpA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
HeapReAlloc
GetStartupInfoA
GetTimeZoneInformation
GetACP
HeapSize
TerminateProcess
VirtualFree
VirtualAlloc
IsBadWritePtr
GetEnvironmentVariableA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr

ole32

CoInitialize
CoUninitialize
CoCreateInstance

comctl32

ord17

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetFileTitleA

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac697dde28eb52e1124bd0a7e45b9c67

Headers

File Characteristics

Imports

kernel32

ole32

comctl32

winspool.drv

comdlg32

Sections

.text Size: 269KB - Virtual size: 268KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 269KB - Virtual size: 268KB

.rsrc
Size: 3KB - Virtual size: 3KB