8edc77cbc3bfab4656a6c26e28691b91_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8edc77cbc3bfab4656a6c26e28691b91_JaffaCakes118
Size

128KB
MD5

8edc77cbc3bfab4656a6c26e28691b91
SHA1

5eb4804704b5015ce0c116692fa96a0543efb4fc
SHA256

66c867888c374427bc5ce748519652ddeb3b14cd7b84b14715968854d02960c8
SHA512

a4b5602d1c8ccd892d8f6922a71b73db83f0a9cce2920dca70b87e3b02c8e93ae16c007a8d0d06325a0a628933faf4dc05ac92065fbde9f221165e448bc3b3e7
SSDEEP

3072:8Y2p6oPBgkfPlmGBICho9gcfJpkW2kpwS6VWMTL25c:89pdBJlmDCho9gcfJpktkS+MAc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8edc77cbc3bfab4656a6c26e28691b91_JaffaCakes118

Files

8edc77cbc3bfab4656a6c26e28691b91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2db47be23a09c3c98d8256fbec60c0a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
HeapFree
HeapDestroy
HeapAlloc
GetVersionExA
GetTickCount
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetCurrentProcessId
GetCurrentProcess
EnterCriticalSection
DeleteCriticalSection
CreateThread
InterlockedCompareExchange
CreateEventA
CloseHandle
GetProcAddress
ExitProcess
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetStringTypeW
GetCPInfo
WriteFile
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
GetEnvironmentStrings
ReadFile
Sleep
UnhandledExceptionFilter
lstrcmpiA
CreateFileA
lstrlenA
RtlUnwind
VirtualFree
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapCreate

user32

PeekMessageA
wsprintfA
GetParent
BeginPaint
KillTimer
MessageBoxA
GetWindowTextLengthA
PostMessageA
PostQuitMessage
SetTimer
TranslateMessage

advapi32

RegEnumKeyExA
SetEntriesInAclA
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
GetLengthSid
GetTokenInformation
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyA

ole32

OleRun

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2db47be23a09c3c98d8256fbec60c0a9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 100KB - Virtual size: 97KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 100KB - Virtual size: 97KB

.reloc
Size: 4KB - Virtual size: 1KB