aacee25bfe0ea984b710b12889fefad2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aacee25bfe0ea984b710b12889fefad2_JaffaCakes118
Size

220KB
MD5

aacee25bfe0ea984b710b12889fefad2
SHA1

dcdff70a35eac72936a341cda3e19aef86c3d9c6
SHA256

693a40017398742eef853a20bd77823af775941f85cfe12aeb6a0b0efada8994
SHA512

0fbc4dd3bbf452fb1d1a8fec4d03002729fde05178039e2c3c85813653922a5875784604a007db9fb13ae36a45f1f3f51ffc24d67a00ad24c3f9d97156c2effa
SSDEEP

3072:bVpsYzCraiRXj7+fekvRiT6DW/PAtp2+/Udwma+l2F8uYvl:Jpsg693+fe6ET6DQIt/U1aZuuY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aacee25bfe0ea984b710b12889fefad2_JaffaCakes118

Files

aacee25bfe0ea984b710b12889fefad2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e775bf8755d6ca30c5163b493b204dc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Mys.pdb

Imports

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

mswsock

GetNameByTypeA
EnumProtocolsA
SetServiceA

comsvcs

SafeRef

kernel32

WriteFile
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
MoveFileExA
GetCurrentProcessId
GetFileTime
GetDiskFreeSpaceA
FindCloseChangeNotification
FindNextChangeNotification
FindFirstChangeNotificationA
GetSystemTimeAsFileTime
GetProcessHeap
GetLocalTime
CreateFileA
CreateProcessA
GetFileAttributesA
WriteConsoleW
GetTempPathA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
SetConsoleCtrlHandler

Exports

Exports

Pipyxybem
Sixa
Upeqev
Vupaguxeh

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 745KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e775bf8755d6ca30c5163b493b204dc7

Headers

File Characteristics

PDB Paths

Imports

ole32

mswsock

comsvcs

kernel32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 116KB - Virtual size: 745KB

.idata Size: 4KB - Virtual size: 2KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 116KB - Virtual size: 745KB

.idata
Size: 4KB - Virtual size: 2KB