b4d7cc641dbc3ae1eea517f8a72fdc85_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b4d7cc641dbc3ae1eea517f8a72fdc85_JaffaCakes118
Size

226KB
MD5

b4d7cc641dbc3ae1eea517f8a72fdc85
SHA1

a452a5b1ada8745dc99db176c0ca26fdfda3f289
SHA256

347882659cf1bdaff526d6017be522baa9775d1765a11ed7c40084c1e15de277
SHA512

5944579d1ca9cde6d8f13d2d75f813ad93b364f1503358ebf8d34e847cb9efe56e11436dd810b10f62e6dea0bce8544536d4e2e7df7c025eb6c0ac7893b1f5a7
SSDEEP

3072:ZHeCHW7tjoBOGwNoRDnQgIIg3DylQpkiOsATWR2EXZWxCbjSF4eMZ:xeq8jd0DnQpoQpdO9TWRRQxCS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4d7cc641dbc3ae1eea517f8a72fdc85_JaffaCakes118

Files

b4d7cc641dbc3ae1eea517f8a72fdc85_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d79be4e9fae625997d47a75860b6fa57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
SetFilePointer
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiA
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
DeleteCriticalSection
DeleteFileA
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
ExpandEnvironmentStringsA
FindResourceA
FindResourceW
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetFileSizeEx
GetFullPathNameA
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsDBCSLeadByte
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalFree
CloseHandle
LockResource
MapViewOfFile
MoveFileA
MoveFileW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
ReleaseMutex
CompareStringA
RtlUnwind

user32

wsprintfA
wsprintfW

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d79be4e9fae625997d47a75860b6fa57

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 156KB - Virtual size: 156KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 17KB - Virtual size: 33KB

.reloc Size: 11KB - Virtual size: 12KB

.rsrc Size: 10KB - Virtual size: 12KB

.text
Size: 156KB - Virtual size: 156KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 17KB - Virtual size: 33KB

.reloc
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 10KB - Virtual size: 12KB