bf6546152e2965904b7573c4bed91c36_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bf6546152e2965904b7573c4bed91c36_JaffaCakes118
Size

192KB
MD5

bf6546152e2965904b7573c4bed91c36
SHA1

33831b2fcfac7d2fcd2e27ecd158b5594f179901
SHA256

a51690676db4b85cb2d7df8b315d047c64037897c7e20eda034144537bc01d34
SHA512

9cb15955d88a168ff1d9e9f5243118f93e3a41b4d7f51e6556f8c227aef3defd769ba5d18642ec335a620a01ca63c9d1b59e7e94a5c30a160caf1a5d54f61a1b
SSDEEP

6144:JOF5CA/nJ4q1edRpGyyat1VyZAi0mwrl5:WC2neSeNGyF3ykz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf6546152e2965904b7573c4bed91c36_JaffaCakes118

Files

bf6546152e2965904b7573c4bed91c36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

548c66ca830a70ee742418177a974ae8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardStatusA
SCardIsValidContext
SCardAddReaderToGroupA
SCardEstablishContext
SCardForgetReaderA
SCardForgetReaderGroupA
SCardGetAttrib
SCardGetStatusChangeA
SCardIntroduceReaderA
SCardIntroduceReaderGroupA
SCardTransmit
SCardListReaderGroupsA
SCardListReadersA
SCardLocateCardsA
SCardLocateCardsByATRA
SCardReconnect
SCardReleaseContext
SCardReleaseStartedEvent
SCardRemoveReaderFromGroupA
SCardSetAttrib
SCardState

sensapi

IsNetworkAlive

sfc

SfcGetNextProtectedFile

kernel32

GetCurrentThreadId
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
ReadFile
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
TlsAlloc
GetProfileStringW
GetWindowsDirectoryA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapFree
FatalAppExitA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
TlsSetValue
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 783KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

548c66ca830a70ee742418177a974ae8

Headers

File Characteristics

Imports

winscard

sensapi

sfc

kernel32

Sections

.text Size: 68KB - Virtual size: 64KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 64KB - Virtual size: 783KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 68KB - Virtual size: 64KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 64KB - Virtual size: 783KB

.reloc
Size: 8KB - Virtual size: 6KB