a11a5d1488177eef82f7967d7c684cc1_JaffaCakes118

General

Target

a11a5d1488177eef82f7967d7c684cc1_JaffaCakes118
Size

228KB
MD5

a11a5d1488177eef82f7967d7c684cc1
SHA1

4f001f927d10327fb80ab8598705535adc2526f4
SHA256

13913a7a13932694d574c99b6021ad4f9dadcdbee5d7178390d0fe76c0148162
SHA512

0f5d59f56565856ffa592bf6af1af997bfe606624c3f68bc6fab4ab0ccde5305ec2c597a8ddd21ea1f523571527959a90dcbd54be14760684d0fcb93ec59a0c4
SSDEEP

6144:VVx6N0CN9V1E78NiA8Kd7khgdEIsE5ac+D:J6NbVW4mKmh6EIsMacM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a11a5d1488177eef82f7967d7c684cc1_JaffaCakes118

Files

a11a5d1488177eef82f7967d7c684cc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ac459e26613e5e3c4de0608831917b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommError
GetProcessWorkingSetSize
GetConsoleAliasExesLengthA
GetPrivateProfileSectionNamesA
OpenFileMappingA
GetSystemWindowsDirectoryA
MapUserPhysicalPages
LoadModule
SetConsoleOutputCP
QueueUserAPC
GlobalDeleteAtom
GetTapeStatus
IsBadHugeWritePtr
GetConsoleInputExeNameA
CreateMutexA
DefineDosDeviceA
SetFileApisToOEM
GlobalSize
RegisterWaitForSingleObject
ReadConsoleOutputCharacterA
GetVolumePathNameA
GetProcessShutdownParameters
GetTempFileNameA
SetWaitableTimer
GetConsoleCursorMode
WritePrivateProfileStructA
GetExitCodeThread
WriteConsoleInputA
GetLogicalDriveStringsA
VirtualAlloc
GetCurrentThreadId
GetModuleHandleA
GetLocalTime
GetTempPathA
UnlockFile
GetNamedPipeHandleStateA
lstrcmpA
GetCommandLineA
PulseEvent
GetProcessId
SetUnhandledExceptionFilter
WideCharToMultiByte
FindNextVolumeMountPointW
SetInformationJobObject
SetComputerNameExW
EnumResourceLanguagesA
WriteConsoleOutputA
GetSystemDirectoryA
OpenEventA
GetSystemTimes
CancelTimerQueueTimer
GetProcessHeaps
ReadConsoleOutputAttribute
MoveFileWithProgressA
CreateDirectoryA
EndUpdateResourceA
OpenJobObjectA
AddConsoleAliasA
SetThreadIdealProcessor
SetConsoleInputExeNameA
OpenEventA
IsBadHugeWritePtr
OpenWaitableTimerA
AllocConsole
PeekConsoleInputA
WriteConsoleOutputCharacterA

tapi32

lineAddProviderA

Sections

.itext
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 68KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ac459e26613e5e3c4de0608831917b9

Headers

File Characteristics

Imports

kernel32

tapi32

Sections

.itext Size: - Virtual size: 2KB

.text Size: 68KB - Virtual size: 731KB

.idata Size: 64KB - Virtual size: 60KB

.rsrc Size: 92KB - Virtual size: 89KB

.itext
Size: - Virtual size: 2KB

.text
Size: 68KB - Virtual size: 731KB

.idata
Size: 64KB - Virtual size: 60KB

.rsrc
Size: 92KB - Virtual size: 89KB