cfe8d2528a430afe129cca19dd618d0a_JaffaCakes118

General

Target

cfe8d2528a430afe129cca19dd618d0a_JaffaCakes118
Size

228KB
MD5

cfe8d2528a430afe129cca19dd618d0a
SHA1

7eab39a5dd266d6dbcbf0218ad1efa2fc8bf1496
SHA256

10ae2c6950ac014ac650676a5098b84d4a6d9f88918656ce1878d7db879c9a30
SHA512

a13f0ce03fb2d4404742712246c7223df92fb4ca4eccf7cd7fa36fd4441bf3fd58f87011d0c53c6c05a533f9ab9c4bea7045de7c7f1774fefc4ecb2b707db549
SSDEEP

6144:VVx6N0CN9V1E78NiA8Kd74bKfARngdEIsE5ac+D:J6NbVW4mKubKfCn6EIsMacM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfe8d2528a430afe129cca19dd618d0a_JaffaCakes118

Files

cfe8d2528a430afe129cca19dd618d0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ac459e26613e5e3c4de0608831917b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommError
GetProcessWorkingSetSize
GetConsoleAliasExesLengthA
GetPrivateProfileSectionNamesA
OpenFileMappingA
GetSystemWindowsDirectoryA
MapUserPhysicalPages
LoadModule
SetConsoleOutputCP
QueueUserAPC
GlobalDeleteAtom
GetTapeStatus
IsBadHugeWritePtr
GetConsoleInputExeNameA
CreateMutexA
DefineDosDeviceA
SetFileApisToOEM
GlobalSize
RegisterWaitForSingleObject
ReadConsoleOutputCharacterA
GetVolumePathNameA
GetProcessShutdownParameters
GetTempFileNameA
SetWaitableTimer
GetConsoleCursorMode
WritePrivateProfileStructA
GetExitCodeThread
WriteConsoleInputA
GetLogicalDriveStringsA
VirtualAlloc
GetCurrentThreadId
GetModuleHandleA
GetLocalTime
GetTempPathA
UnlockFile
GetNamedPipeHandleStateA
lstrcmpA
GetCommandLineA
PulseEvent
GetProcessId
SetUnhandledExceptionFilter
WideCharToMultiByte
FindNextVolumeMountPointW
SetInformationJobObject
SetComputerNameExW
EnumResourceLanguagesA
WriteConsoleOutputA
GetSystemDirectoryA
OpenEventA
GetSystemTimes
CancelTimerQueueTimer
GetProcessHeaps
ReadConsoleOutputAttribute
MoveFileWithProgressA
CreateDirectoryA
EndUpdateResourceA
OpenJobObjectA
AddConsoleAliasA
SetThreadIdealProcessor
SetConsoleInputExeNameA
OpenEventA
IsBadHugeWritePtr
OpenWaitableTimerA
AllocConsole
PeekConsoleInputA
WriteConsoleOutputCharacterA

tapi32

lineAddProviderA

Sections

.itext
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 68KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ac459e26613e5e3c4de0608831917b9

Headers

File Characteristics

Imports

kernel32

tapi32

Sections

.itext Size: - Virtual size: 2KB

.text Size: 68KB - Virtual size: 731KB

.idata Size: 64KB - Virtual size: 60KB

.rsrc Size: 92KB - Virtual size: 89KB

.itext
Size: - Virtual size: 2KB

.text
Size: 68KB - Virtual size: 731KB

.idata
Size: 64KB - Virtual size: 60KB

.rsrc
Size: 92KB - Virtual size: 89KB