b12658081c0c0ea1aa295ff5e96014aa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b12658081c0c0ea1aa295ff5e96014aa_JaffaCakes118
Size

472KB
MD5

b12658081c0c0ea1aa295ff5e96014aa
SHA1

88b83e61292db11fbe5d12fc4ae8857f3f0caf3c
SHA256

2da9391107d87e7aba0462c2263a8a01db61a7709fe09be68dc2e73745dc4327
SHA512

b0a42539a3188f886e4677595d1207ae1893d24d7c92de1a988fca0ad24ceb221ba948fb9f245b5aff157ce6440ef1462905733a73772f91fcfe5409e76c0e15
SSDEEP

6144:I45LucdVRp5/bB+4mnfiG4rUpkEzs2dcFMTpxW3:IguGm6faxCMvW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b12658081c0c0ea1aa295ff5e96014aa_JaffaCakes118

Files

b12658081c0c0ea1aa295ff5e96014aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c5b0375ae496482838f9eeed27bdb11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
LoadCursorA
RegisterClassExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
MessageBoxA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
PostQuitMessage
DefWindowProcA
CreateWindowExA
SendDlgItemMessageA
LoadStringW

gdi32

GetStockObject

kernel32

CompareStringW
CompareStringA
CreateFileA
GetTimeZoneInformation
GetLocaleInfoW
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
WriteConsoleA
ReadFile
LoadLibraryA
FreeLibrary
SetConsoleCtrlHandler
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetConsoleOutputCP
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
GetStartupInfoA
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle
HeapSize
GetACP
GetOEMCP
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID

Sections

.text
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c5b0375ae496482838f9eeed27bdb11

Headers

File Characteristics

Imports

user32

gdi32

kernel32

Sections

.text Size: 184KB - Virtual size: 182KB

.rdata Size: 36KB - Virtual size: 33KB

.data Size: 8KB - Virtual size: 15KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 236KB - Virtual size: 235KB

.text
Size: 184KB - Virtual size: 182KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 8KB - Virtual size: 15KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 236KB - Virtual size: 235KB