b90a01dc81e372b015ca646d61701be2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b90a01dc81e372b015ca646d61701be2_JaffaCakes118
Size

195KB
MD5

b90a01dc81e372b015ca646d61701be2
SHA1

db3be7a9a16022778175305593c6107b04128e91
SHA256

256a5f44b4b1b95cb69105d88137ceeca3aaff0a7ca81747f73c75ff50bd1b95
SHA512

8c2348870e608ba947a3a0cff1f650a139f9011678fa830f65cd91e48cfdaf1b5e8f850278db4db8dceb1523c359b2c905ede99a5743264bee6caa1ede75ae7d
SSDEEP

6144:K0GzrWI33wLXRzw5SVtcFqGJ6fhpa+BG3:K0mCLBzISVtR/fnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b90a01dc81e372b015ca646d61701be2_JaffaCakes118

Files

b90a01dc81e372b015ca646d61701be2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6c96a66f31da4af280c86db25d02d84c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
GetVersionExA
CloseHandle
DeleteFileA
CreateThread
lstrcpyA
IsProcessorFeaturePresent
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapReAlloc
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
GetCurrentDirectoryA
EnterCriticalSection
LeaveCriticalSection
HeapSize
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
CreateMutexA
GetModuleHandleA
GetSystemInfo
VirtualAlloc
GetProcAddress
GetStartupInfoW
ExitProcess
lstrcatA
CreateFileW
ReadFile
TerminateThread
WriteFile
HeapFree
HeapAlloc
lstrlenA
GetFileSize
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
CreateFileA
GetCommandLineA
HeapSetInformation
GetLastError
EncodePointer
DecodePointer
RaiseException
SetUnhandledExceptionFilter
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA

user32

RegisterClassA
LoadCursorA
EndPaint
DestroyWindow
GetMessageA
ScreenToClient
RegisterClassExA
PostQuitMessage
SendDlgItemMessageA
FillRect
LoadIconA
wsprintfA
GetClientRect
SendMessageA
BeginPaint
PtInRect
TranslateMessage
InflateRect
MessageBoxA
CreateWindowExA
DefWindowProcA
ShowWindow
FrameRect
PostMessageA
DispatchMessageA
GetSystemMetrics
UpdateWindow

gdi32

LineTo
GetStockObject
MoveToEx
CreateFontA
DeleteObject
SelectObject
CreatePen
CreateSolidBrush

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegEnumKeyA
RegQueryValueExA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

iphlpapi

GetTcpStatistics

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c96a66f31da4af280c86db25d02d84c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

iphlpapi

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 141KB - Virtual size: 144KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 141KB - Virtual size: 144KB

.rsrc
Size: 7KB - Virtual size: 6KB