a50517282e0421bbacab495480ee98ba_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a50517282e0421bbacab495480ee98ba_JaffaCakes118
Size

517KB
MD5

a50517282e0421bbacab495480ee98ba
SHA1

367c3152cc42d80305c656c5db985c83012530cb
SHA256

ac06e80f4b4702af6063dcc43c00b1fa6d63b9d477f03b3a6c335bb99369b3e0
SHA512

7ab22f48f091dcc6b5d2df1a13c91fc1747a44128fbcc6c43fec31ef0df8a1d4aca60a31bf1dbc2b457c37dad5ff3a36e6791485d1ae538e099acf6d5f70859d
SSDEEP

12288:sNJnSimgUyj07Wjz6Wf2Ec2rjmXA8OYii3cHSqlg:sNJnSimWGcz6WX+Xpgi3z2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a50517282e0421bbacab495480ee98ba_JaffaCakes118

Files

a50517282e0421bbacab495480ee98ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2ebe0c8a77488268ea337342dd9cbb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\UBKEXRNA

Imports

kernel32

HeapAlloc
IsBadWritePtr
GetStringTypeA
GetACP
FreeEnvironmentStringsW
TlsGetValue
GetDateFormatA
GetFileType
GetSystemTimeAsFileTime
GetStdHandle
CopyFileA
IsValidCodePage
GetEnvironmentStringsW
VirtualProtect
GetCurrentThreadId
OpenMutexA
FlushFileBuffers
LCMapStringW
EnumSystemLocalesA
GetSystemInfo
GetVersionExA
GetCurrentProcess
WriteFile
UnhandledExceptionFilter
GetCurrentProcessId
CompareStringA
GetCurrencyFormatA
VirtualQuery
GetProcessHeap
SetEnvironmentVariableA
WriteConsoleOutputW
ReadFile
EnumDateFormatsW
GetTimeFormatA
GetOEMCP
CreateMutexA
HeapDestroy
QueryPerformanceCounter
GetModuleHandleA
DeleteCriticalSection
GetCPInfo
HeapCreate
SetFilePointer
EnterCriticalSection
IsValidLocale
LCMapStringA
CloseHandle
LoadLibraryA
TerminateProcess
ExitProcess
HeapSize
GetUserDefaultLCID
VirtualAlloc
GetModuleFileNameA
GetLocaleInfoW
Sleep
GetTimeZoneInformation
EnumResourceLanguagesW
LeaveCriticalSection
GetStringTypeW
CompareStringW
HeapReAlloc
GetProcAddress
GetStartupInfoA
GetLastError
GlobalReAlloc
FreeEnvironmentStringsA
SetStdHandle
InterlockedExchange
SetLastError
GetLocaleInfoA
HeapFree
MultiByteToWideChar
GetCurrentThread
TlsFree
GetTickCount
FreeLibraryAndExitThread
RtlUnwind
InterlockedDecrement
GlobalLock
GetCommandLineA
CreateNamedPipeW
SetHandleCount
InitializeCriticalSection
TlsAlloc
TlsSetValue
WideCharToMultiByte
VirtualFree
GetEnvironmentStrings

comctl32

InitCommonControlsEx

user32

LoadKeyboardLayoutW
RegisterClassExA
TabbedTextOutA
GetKeyNameTextW
CreateIconFromResource
OpenWindowStationW
CopyImage
GetMenuInfo
RegisterClassA
CharLowerW
SetMenuContextHelpId
DdeConnectList
CallMsgFilterW

Sections

.text
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2ebe0c8a77488268ea337342dd9cbb8

Headers

File Characteristics

PDB Paths

Imports

kernel32

comctl32

user32

Sections

.text Size: 382KB - Virtual size: 382KB

.rdata Size: 16KB - Virtual size: 43KB

.data Size: 106KB - Virtual size: 105KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 382KB - Virtual size: 382KB

.rdata
Size: 16KB - Virtual size: 43KB

.data
Size: 106KB - Virtual size: 105KB

.rsrc
Size: 11KB - Virtual size: 11KB