d5bb89c845b02d0dd21bfbf660deaf05_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d5bb89c845b02d0dd21bfbf660deaf05_JaffaCakes118
Size

1.0MB
MD5

d5bb89c845b02d0dd21bfbf660deaf05
SHA1

c01d57aa8dc107f069e4e7aaba4685e5da62a1a9
SHA256

4b10e823d7018f19c1a25faac39fbe7cf01507cb2f57d654b7b4ecd3006a3a12
SHA512

64b470380117173e6c305421ddfd13e3dff8c17c1848975cb6afaac1a48c0adcb9ef7c4897b1d003eabac2ac88cf512cccc68bb66055fed9e7db650aa5ff19b4
SSDEEP

12288:/tA0rdYOu+RV6nWwp9mfNKWVGl79pEOrYs4YR8Un+dR5wPmM1QGcMU4KdS2w1r8:O1Y6nWo98NKW8lzrYs4YRNcIQGrUmt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5bb89c845b02d0dd21bfbf660deaf05_JaffaCakes118

Files

d5bb89c845b02d0dd21bfbf660deaf05_JaffaCakes118
.exe windows:5 windows x86 arch:x86

62fdd59c93c15555f3bcaa0dc59fd0cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

CreateErrorInfo
GetErrorInfo
SetErrorInfo
VarNeg
VarBoolFromStr
VarBstrFromBool
VarCyFromStr
VarI4FromStr
VariantChangeTypeEx
VariantChangeType
VariantCopyInd
VariantInit
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayCreate
SysStringLen

kernel32

GetFileType
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
GetStringTypeW
HeapAlloc
OutputDebugStringW
RtlUnwind
GetProcAddress
GlobalLock
GlobalUnlock
VirtualAlloc
HeapReAlloc
GetCurrentThreadId
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForMultipleObjects
SetEndOfFile
FindClose
CloseHandle
GetSystemTimeAsFileTime
FormatMessageW
FindResourceExW
GetTempPathW
FindFirstFileW
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
CreateFileW
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 6.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ht8lh7
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.5dlfo4
Size: 385KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62fdd59c93c15555f3bcaa0dc59fd0cb

Headers

File Characteristics

Imports

oleaut32

kernel32

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 312KB - Virtual size: 6.8MB

.ht8lh7 Size: 230KB - Virtual size: 229KB

.5dlfo4 Size: 385KB - Virtual size: 385KB

.rsrc Size: 13KB - Virtual size: 15KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 312KB - Virtual size: 6.8MB

.ht8lh7
Size: 230KB - Virtual size: 229KB

.5dlfo4
Size: 385KB - Virtual size: 385KB

.rsrc
Size: 13KB - Virtual size: 15KB