d5de938bfb81acd7460d13a026e5730c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d5de938bfb81acd7460d13a026e5730c_JaffaCakes118
Size

124KB
MD5

d5de938bfb81acd7460d13a026e5730c
SHA1

5a3eda351592a307ac10d0dfcb8f5385bb628998
SHA256

58b1445030e2fd43a40a63891be2239e83559b913367a87f31ab66595b340871
SHA512

0c30c8f32c971bcf3ab56c30edeb18f486d7d1856e58b9404bfec1b36476f94a5a6c2d7cfddae2ba96a2b865ec71a9fc22f724655af99ae6b4f537dc0a080bba
SSDEEP

3072:ARxg3dNmYJDwIZU9BvI6kcgsyEsrdOFTyJXP/H:bPJM2UzvtsjEJF+3H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5de938bfb81acd7460d13a026e5730c_JaffaCakes118

Files

d5de938bfb81acd7460d13a026e5730c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c808fbea1ce4c3b936319f5db25f2be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetInformationJobObject
GetStdHandle
MoveFileA
SetEndOfFile
GetBinaryTypeA
WritePrivateProfileStringA
HeapAlloc
GetTimeZoneInformation
SetStdHandle
GetCurrentProcess
GetTempPathA
ScrollConsoleScreenBufferW
LoadLibraryA
HeapSize
GetCurrentThreadId
EnterCriticalSection
GetProcAddress
GetCommandLineA
InterlockedDecrement
GetProcessHeap
GetStartupInfoA
GetConsoleOutputCP
FlushFileBuffers
GetFileAttributesA
SetUnhandledExceptionFilter
LCMapStringA
GetStringTypeA
GetTempFileNameA
GlobalCompact
GetVersionExA
GetFileType
TerminateJobObject
ExitProcess
IsValidCodePage
GetSystemTimeAsFileTime
GetLocaleInfoA
HeapFree
CreateProcessA
InitializeCriticalSection
GetStringTypeW
GetLastError
GetSystemPowerStatus
GetConsoleCP
DeleteCriticalSection
GetExitCodeThread
WriteConsoleA
RemoveDirectoryA
GetOEMCP
FindNextFileA
WaitForSingleObjectEx
FatalExit
LeaveCriticalSection
RaiseException
TerminateProcess
WriteConsoleW
GetModuleHandleA
GetModuleFileNameA
IsDebuggerPresent
GetCurrentProcessId
GetFileSize
GetExitCodeProcess
VDMConsoleOperation
LCMapStringW
SetHandleCount
GetConsoleMode
UnhandledExceptionFilter
CopyFileA
SetEvent
Sleep
GetTickCount
CreateEventW
GetCurrentProcessId

shell32

SHBrowseForFolderA

msvcrt

__setusermatherr
_controlfp
__set_app_type
__p__fmode
__p__commode
_except_handler3

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

user32

ToUnicodeEx
PostQuitMessage
GetClassInfoW
InvertRect
CreateWindowExW
MapVirtualKeyExW
GetMenuStringW
UpdateWindow

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c808fbea1ce4c3b936319f5db25f2be

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

msvcrt

version

user32

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 2KB - Virtual size: 1KB

.rdata Size: 108KB - Virtual size: 127KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 2KB - Virtual size: 1KB

.rdata
Size: 108KB - Virtual size: 127KB