d75472d785d3267b737caf7aa0448e6f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d75472d785d3267b737caf7aa0448e6f_JaffaCakes118
Size

417KB
MD5

d75472d785d3267b737caf7aa0448e6f
SHA1

a7c621d62bff139cc06b16ec6dc182d78d9663a4
SHA256

7374529d844e4ccacdca818647cd798d873b4e886ea6e399ad9e5bd26c18558f
SHA512

599278749c4a175e348cdc8025dce2db427ed43f686cf378f14298982fe948c83379d9cb14d84b6b8c77b7df3752625d8d6d021574fa702206cc3cc624c0191d
SSDEEP

6144:3Dar8mv2vQIM3Hmzg0gJ/5z6/ZcJ3J8CdsxZ8dXWvV:zjc2vQIQHag0gbz6eJZ8CdsgqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d75472d785d3267b737caf7aa0448e6f_JaffaCakes118

Files

d75472d785d3267b737caf7aa0448e6f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a792ab7d2069265c53268626ce33aac7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetFileTime
GetNativeSystemInfo
IsProcessorFeaturePresent
lstrcpyA
_lcreat
CreateEventW
LoadLibraryA
GetModuleHandleA
ExpandEnvironmentStringsW
WritePrivateProfileStructW
MoveFileA
GetExitCodeThread
GetCurrencyFormatW
SetThreadUILanguage
GetConsoleCursorInfo
GetConsoleAliasExesLengthA
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetStringTypeW
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
ExitProcess
GetLongPathNameA
VirtualProtect
VerifyVersionInfoW
GlobalAlloc
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
HeapAlloc
HeapFree
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
SetLastError
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetConsoleCP
CloseHandle

user32

GetScrollBarInfo
DestroyIcon
SetRect
IsCharAlphaNumericW
SetDlgItemInt
GetMessageExtraInfo
GetMessageTime

advapi32

RegDeleteKeyW
GetKernelObjectSecurity
OpenBackupEventLogW
GetServiceDisplayNameA

Exports

Exports

_MyFunc124@4

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a792ab7d2069265c53268626ce33aac7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 236KB - Virtual size: 236KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 85KB - Virtual size: 398KB

.idata Size: 5KB - Virtual size: 7KB

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 236KB - Virtual size: 236KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 85KB - Virtual size: 398KB

.idata
Size: 5KB - Virtual size: 7KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 11KB - Virtual size: 10KB