a38c4c38cadcfe261cc19eccf0cf99b8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a38c4c38cadcfe261cc19eccf0cf99b8_JaffaCakes118
Size

152KB
MD5

a38c4c38cadcfe261cc19eccf0cf99b8
SHA1

e195c9e5f78b81cc6633897721ed99f20c7cb6eb
SHA256

58c4a839c14dbd56b7ac2a8e0f313b4e1acb3aeb919c1080605d9a268603b8c9
SHA512

d2227a471adeaa818a16ee8d766aaf8539885acc30f8945f6d1b4c98d9a91367317c851683e50f37c550fc10180c692f3b0303104c93c0c8ae10e75be0df65aa
SSDEEP

3072:3OpMHBvsoThSee60CWSRq7ZUJkEt4maJ9Q2no9b8oTFtVecQEBDJ/D:3OpMHBvsoXpVq7dmcq2o9b9tVew/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a38c4c38cadcfe261cc19eccf0cf99b8_JaffaCakes118

Files

a38c4c38cadcfe261cc19eccf0cf99b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63a165ed415d31c6265f6d75280fa9f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
ExitProcess
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
SetFileAttributesA
GetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetProfileStringW
LCMapStringA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
GetProcAddress
GetVersion
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

user32

GetKeyNameTextW
DrawEdge
ReleaseDC
DefWindowProcW
CreateWindowExA
GetWindowLongA
GetDC
GetAsyncKeyState
GetClassNameW
EnumWindows
GetClassInfoExA
LoadBitmapA
SetDlgItemTextA
IsDlgButtonChecked

ole32

CoInitialize
CoRegisterSurrogate
CoRegisterClassObject
OleUninitialize
OleInitialize

ws2_32

WSAConnect
WSACreateEvent
WSASocketA
WSACloseEvent
WSAAddressToStringA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63a165ed415d31c6265f6d75280fa9f2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

ws2_32

version

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 60KB - Virtual size: 135KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 60KB - Virtual size: 135KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB