cc4fecd33a8843267f9841d480fc138a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

cc4fecd33a8843267f9841d480fc138a_JaffaCakes118
Size

3.8MB
MD5

cc4fecd33a8843267f9841d480fc138a
SHA1

e5f28d9feef1a8a03d80add7bafc306e24e9c40c
SHA256

74846745333b001821e5641e3f037f5560f5098f4946516f9f0917f193c740e7
SHA512

fe345c8c9d9a9ce5578d57d3430f24788930742de70e9968aaa170c01a405bf58ae01b1010957029d4191f4af8fe3105c2abe26a70cc6f4154e121a9fb2b49ee
SSDEEP

98304:MrdFoOXiSX7PHLQhGQLXtkHBGa0IarlKzRThyNUSAQgQr:MXXiYT8GQLXtib0Hpx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
cc4fecd33a8843267f9841d480fc138a_JaffaCakes118

Files

cc4fecd33a8843267f9841d480fc138a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0505efc31f40ea76cbe1a3a5d5dda7f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
HeapReAlloc
CreateFileA
HeapCompact
lstrcpynA
WriteTapemark
InterlockedIncrement
SetConsoleTextAttribute
WaitNamedPipeA
GetCurrentProcess
SetDefaultCommConfigW
GetEnvironmentStringsW
SetHandleInformation
WaitForSingleObject
SetEvent
GetModuleHandleW
GetProcessHeap
GetConsoleTitleA
ReadConsoleW
WriteFile
FindActCtxSectionStringA
GetEnvironmentStrings
ActivateActCtx
FreeConsole
GetFileAttributesA
HeapValidate
VerifyVersionInfoA
HeapQueryInformation
GetAtomNameW
LCMapStringA
ReleaseActCtx
SetLastError
AttachConsole
VerLanguageNameW
ResetEvent
LocalAlloc
SetConsoleDisplayMode
OpenEventA
HeapLock
SetConsoleWindowInfo
GetTapeParameters
WaitForMultipleObjects
SetConsoleTitleW
GetModuleHandleA
CreateMutexA
VirtualProtect
DeleteCriticalSection
ReleaseMutex
GetVersion
GetCurrentProcessId
GetPrivateProfileSectionW
WriteProcessMemory
CommConfigDialogW
lstrcpyA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
Sleep
GetProcAddress
ExitProcess
GetLastError
GetStdHandle
GetModuleFileNameA
TerminateProcess
IsDebuggerPresent
HeapAlloc
HeapFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

@SetViceCitiesz@0

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hadoni
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0505efc31f40ea76cbe1a3a5d5dda7f0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.data Size: 31KB - Virtual size: 5.3MB

.hadoni Size: 512B - Virtual size: 1B

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 3.7MB - Virtual size: 3.7MB

.data
Size: 31KB - Virtual size: 5.3MB

.hadoni
Size: 512B - Virtual size: 1B

.rsrc
Size: 40KB - Virtual size: 39KB