a90cd4e4751f65da223f38e402f21e02_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a90cd4e4751f65da223f38e402f21e02_JaffaCakes118
Size

219KB
MD5

a90cd4e4751f65da223f38e402f21e02
SHA1

6efe4e2516fc8c6e4e31d04d60b58a5f2276ffaf
SHA256

e9ca43ffabb77d0f4973664d525a9c9d16228a52ac7bb1e79609ebe1c271a278
SHA512

72708616dae7276675a2da49175635c61b7f050dc2c851cda80ff747af084c52c738afdfc88f0dc0bfb048c60e19b7928f594a8e2136b04f3fc78cec6cdf0adc
SSDEEP

3072:s3dBhJ6GDUp9KlqzzYPmXWdC1kHyTRLGe4wQ0VePQMJxP+T4n:qBiGIWozzYumdC1k25tVeP3J9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a90cd4e4751f65da223f38e402f21e02_JaffaCakes118

Files

a90cd4e4751f65da223f38e402f21e02_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0e25d3fb590d93eb0d3008cdfd67f690

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
ReadFileEx
GlobalFree
LoadLibraryExA
GetCurrentThreadId
GetVersionExA
CloseHandle
WriteFileEx
SetStdHandle
WriteConsoleW
SetFilePointer
GetStringTypeW
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
GetLastError
DisconnectNamedPipe
MultiByteToWideChar
GetOverlappedResult
lstrcatA
CreateFileW
GetModuleFileNameW
IsValidCodePage
CreateEventA
ExitProcess
Sleep
GlobalAlloc
WriteFile
GetProcessHeap
GetTickCount
WaitForSingleObjectEx
ConnectNamedPipe
SleepEx
SetEvent
WaitForSingleObject
HeapFree
GetCurrentProcess
InterlockedDecrement
HeapAlloc
TlsAlloc
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
EncodePointer
GetStdHandle
lstrlenA
GetFileSize
GetEnvironmentVariableW
RtlUnwind
LocalFree
GetProcAddress
GetModuleHandleW
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
HeapCreate
VirtualQuery

user32

DestroyWindow
PostQuitMessage
LoadIconA
wsprintfA
GetClientRect
CreateWindowExA
DefWindowProcA
ShowWindow
PostMessageA
GetSystemMetrics
UpdateWindow
FindWindowA
LoadCursorA
RegisterClassA
MessageBoxA

gdi32

GetTextMetricsA
GetStockObject

advapi32

AddUsersToEncryptedFile
LookupAccountNameW

crypt32

CertFindCertificateInStore
CertCloseStore
CertFreeCertificateContext
CertOpenSystemStoreW

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e25d3fb590d93eb0d3008cdfd67f690

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

crypt32

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 148KB - Virtual size: 156KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 148KB - Virtual size: 156KB

.rsrc
Size: 4KB - Virtual size: 3KB