d4e1c6385d71a975262c875c9da9eb3e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d4e1c6385d71a975262c875c9da9eb3e_JaffaCakes118
Size

425KB
MD5

d4e1c6385d71a975262c875c9da9eb3e
SHA1

ffc8150b2ac404e5c71525ab4b711721b8462674
SHA256

31633bdc82686b7838660c3c188bfbd430684f9ce87c82998daf958271d8dfab
SHA512

4e9afad1bef10e9f44b67c9bf6dc8cfdf75a29d3589e56917d9459978947276f1a3552292b03b175acad467458ac7964553d6cc65cca11009d55fdd941ecc3dd
SSDEEP

6144:Y6kr73Nr3LIgBI0nVcz8hk1zVPlZo92cVvkQGNMdGOJweEn4:/kHRbI0nWz8IRtZs2Wk2GOJweEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4e1c6385d71a975262c875c9da9eb3e_JaffaCakes118

Files

d4e1c6385d71a975262c875c9da9eb3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a223accd4eecb70e4d05506b5fbbfc9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
LCMapStringA
HeapAlloc
VirtualFree
FreeEnvironmentStringsW
GetCurrentThread
UnhandledExceptionFilter
EnterCriticalSection
GetCurrentProcessId
WriteConsoleOutputAttribute
WriteConsoleOutputW
LeaveCriticalSection
SetConsoleCtrlHandler
GetSystemTime
IsDebuggerPresent
TlsAlloc
InterlockedDecrement
TlsFree
WideCharToMultiByte
SetEnvironmentVariableA
FreeLibrary
GetModuleHandleW
GetOEMCP
DeleteCriticalSection
GetStringTypeA
RtlUnwind
HeapSize
TerminateProcess
GetMailslotInfo
GetCurrencyFormatA
TlsSetValue
GetTimeZoneInformation
GetStartupInfoW
CompareStringA
HeapReAlloc
GetLocaleInfoW
WriteFile
GetCurrentProcess
InterlockedExchange
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetFileType
EnumSystemLocalesA
GetUserDefaultLCID
GetLastError
IsValidCodePage
CreateSemaphoreA
MultiByteToWideChar
VirtualQuery
GetStdHandle
SetLastError
LoadLibraryA
CreateMutexA
lstrcmpA
SetUnhandledExceptionFilter
HeapFree
GetStartupInfoA
LCMapStringW
VirtualAlloc
GetCurrentThreadId
ReadConsoleW
HeapCreate
InterlockedIncrement
GetEnvironmentStrings
GetStringTypeW
WaitForMultipleObjectsEx
ReleaseMutex
Sleep
ExitProcess
GetACP
GetProcAddress
InitializeCriticalSection
GetModuleFileNameW
GetTimeFormatA
GetTickCount
CompareStringW
GetSystemTimeAsFileTime
GetModuleFileNameA
SetHandleCount
IsValidLocale
GetLocaleInfoA
GetDateFormatA
GetCommandLineW
GetShortPathNameW
GetCPInfo
TlsGetValue
GetEnvironmentStringsW
GetModuleHandleA

user32

GetKBCodePage
GetDlgItem
InvalidateRgn

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a223accd4eecb70e4d05506b5fbbfc9b

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 130KB - Virtual size: 130KB

.rdata Size: 8KB - Virtual size: 17KB

.data Size: 284KB - Virtual size: 283KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 130KB - Virtual size: 130KB

.rdata
Size: 8KB - Virtual size: 17KB

.data
Size: 284KB - Virtual size: 283KB

.rsrc
Size: 1KB - Virtual size: 1KB