b18db9c158f2610a9191736203fe86fd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b18db9c158f2610a9191736203fe86fd_JaffaCakes118
Size

209KB
MD5

b18db9c158f2610a9191736203fe86fd
SHA1

23d6158327c361b7c60735b5820e718eef6a3064
SHA256

8e5b6eb034d3b637b88680809e6908b782e4bcf43eab821fa37b1953a0b884b1
SHA512

f4cb54c08de2d575196a806b4ce23b33280237fb06c7f07e56b3bb031c231370152a488cd168d71998ca054ad22689078a839cf3936142056b28003caf1b0392
SSDEEP

3072:u5bhq9KaK0pIwfz/lUYJ8lHjGpew/2p9YEcVYaOayrjfCgVzS0qRlW:u+9tK0ptfz6+q6p/S5qYaODjfCmSVW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b18db9c158f2610a9191736203fe86fd_JaffaCakes118

Files

b18db9c158f2610a9191736203fe86fd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ab134c8f808af47e1c2ed4f0f34a5459

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
lstrlenA
BuildCommDCBAndTimeoutsA
FreeLibrary
LocalCompact
SetUnhandledExceptionFilter
GetCommState
ReadConsoleA
InterlockedDecrement
SetEnvironmentVariableW
GetProfileSectionA
WaitForSingleObject
CallNamedPipeW
SetTapeParameters
GetProcessPriorityBoost
GetModuleHandleW
LocalFlags
FindNextVolumeMountPointA
GetConsoleMode
CopyFileW
WritePrivateProfileStructW
SetSystemPowerState
lstrcatA
GetACP
SetPriorityClass
lstrlenW
DisconnectNamedPipe
DeactivateActCtx
CreateJobObjectA
GetNamedPipeHandleStateW
IsDBCSLeadByteEx
SetLastError
GetProcAddress
ReadFileEx
SetStdHandle
GetConsoleDisplayMode
EnterCriticalSection
GetLocalTime
LoadLibraryA
LocalAlloc
SetFileApisToANSI
FindAtomA
GetPrivateProfileStructA
EnumResourceNamesA
RequestWakeupLatency
GetCurrentDirectoryA
OpenSemaphoreW
lstrcpyA
ExitThread
CreateMutexW
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetLastError
HeapFree
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
VirtualAlloc
HeapReAlloc
GetCPInfo
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetConsoleCP
FlushFileBuffers
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

advapi32

SetThreadToken

Exports

Exports

_alendelon@0
_gibbon@4
_gifgeek@8
_odekolon@4

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 679KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab134c8f808af47e1c2ed4f0f34a5459

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 180KB - Virtual size: 179KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 6KB - Virtual size: 679KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 180KB - Virtual size: 179KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 6KB - Virtual size: 679KB

.rsrc
Size: 8KB - Virtual size: 8KB