b0675ecfe5a562cf5e1003e6e752cddd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b0675ecfe5a562cf5e1003e6e752cddd_JaffaCakes118
Size

131KB
MD5

b0675ecfe5a562cf5e1003e6e752cddd
SHA1

63b5e6186ce184189f9b3f927efc216ad92781fb
SHA256

7acff039734aaa09292f27270bb87a203602172217784a1a3f3c20a07087593b
SHA512

d43f3431361d29ba97a3a4f3cb4164a3ef3db6d1f15dd40749488baf345f4caa04f8a48e60de37b84cf6817d4a39f3eaacc95f47f800ba13a16dec44b82e48d2
SSDEEP

3072:ZQfXvRswGzXTeFv/pLDrVlslg/lDMqqDLy/Ev:W35FR3A2+qqDLu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0675ecfe5a562cf5e1003e6e752cddd_JaffaCakes118

Files

b0675ecfe5a562cf5e1003e6e752cddd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

49ef266628c0ff061c3cd788675fcadd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrlenW
WideCharToMultiByte
GetProcessHeap
_lclose
_lread
OpenFile
LoadLibraryA
ReadFile
SetEvent
GlobalAlloc
CreateFileA
GetSystemTimeAsFileTime
MultiByteToWideChar
GetProcAddress
WaitForSingleObject
CreateThread
CreateEventW
HeapCreate
ExpandEnvironmentStringsW
GetLocaleInfoA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GlobalFree
InterlockedExchange
Sleep
InterlockedCompareExchange
VirtualProtect
CloseHandle
GetCommandLineA
RtlUnwind
GetVersionExA
VirtualQuery
ExitProcess
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
WriteFile
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetSystemInfo

user32

GetMessageW
LoadStringW
DispatchMessageW

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteValueW

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49ef266628c0ff061c3cd788675fcadd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 38KB - Virtual size: 38KB

.data Size: 16KB - Virtual size: 58KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 38KB - Virtual size: 38KB

.data
Size: 16KB - Virtual size: 58KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 3KB