a9ffe3c3b1e0ef8846de69d62a12b67b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a9ffe3c3b1e0ef8846de69d62a12b67b_JaffaCakes118
Size

565KB
MD5

a9ffe3c3b1e0ef8846de69d62a12b67b
SHA1

eb9c147fc0be58f4e8c9b0123150382a2f7bf863
SHA256

ab4814b81a255b82664642678e0dddf9a8216baea331e282f335abff93366c88
SHA512

74a526625886cf3f68d6a0acc81951c299f179c2efcb6f92203b2950088ad8d23639349d3aa7623c09fc73bd32d0fd3ec9f33c904589faa1f37dd0d48fef77f9
SSDEEP

12288:+yHx0H+pgoJdDRUD0Y5uURgjSDfUout+ZU6J4:5HyepgoJ4btWeDfUDMU6J4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9ffe3c3b1e0ef8846de69d62a12b67b_JaffaCakes118

Files

a9ffe3c3b1e0ef8846de69d62a12b67b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

450696b966d8727f7def654307d701ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesA
GetConsoleCursorInfo
WritePrivateProfileSectionW
UnmapViewOfFile
LeaveCriticalSection
GetFileType
CompareStringW
GlobalReAlloc
GetCommandLineW
ConnectNamedPipe
GetProcessHeap
IsValidLocale
GetBinaryTypeA
EndUpdateResourceA
CancelIo
EnumSystemCodePagesW
LoadLibraryExA
GetSystemTime
GetModuleFileNameW
GetVolumeInformationW
ExitThread
SetCurrentDirectoryA
SuspendThread
WriteProcessMemory
WaitNamedPipeA
VirtualQuery
FreeLibrary
GetOverlappedResult
SetLastError
FlushFileBuffers
GlobalFree
_hread
ExitProcess

user32

UpdateWindow
DrawAnimatedRects
MessageBoxIndirectW
SendMessageTimeoutW
ChildWindowFromPoint
GetKeyboardLayoutNameW
DispatchMessageA
GetMonitorInfoW
SetWindowLongA
ReleaseDC
FindWindowW
GetClipboardFormatNameA

version

VerQueryValueA

advapi32

CryptAcquireContextA
RegisterServiceCtrlHandlerW
RegOpenKeyA
SetTokenInformation
GetSecurityDescriptorGroup
LookupAccountSidA
RegQueryInfoKeyW
CryptCreateHash
LogonUserW

ws2_32

WSAAsyncGetHostByName
recv
WSAConnect
getprotobyname

ole32

ReadClassStg
ReadClassStm

oleaut32

QueryPathOfRegTypeLi
SafeArrayRedim
LoadTypeLi
SafeArrayUnaccessData
SafeArrayPutElement

Sections

.text
Size: 2KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

450696b966d8727f7def654307d701ef

Headers

File Characteristics

Imports

kernel32

user32

version

advapi32

ws2_32

ole32

oleaut32

Sections

.text Size: 2KB - Virtual size: 218KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 269KB - Virtual size: 269KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 2KB - Virtual size: 218KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 269KB - Virtual size: 269KB

.rsrc
Size: 16KB - Virtual size: 16KB