de294488ed0025166a0bd3aed59cd243_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

de294488ed0025166a0bd3aed59cd243_JaffaCakes118
Size

840KB
MD5

de294488ed0025166a0bd3aed59cd243
SHA1

2251e2ad2dc2c8282b26a2ce7fb6991b9417c581
SHA256

2e5da66eb989a8d004fab4e17231843c62feec48f29424b1125a1547c2818ee2
SHA512

f52be998962e7c3e400f0525e5a182687627bc59cb349ae693c2181a4f743da155474ad42f29a8f9dafa8ae82505ac0974188790f19dd7f0b29b5485a036f56c
SSDEEP

24576:Wzu2Qu7JiQIT5+WUlUDW/qKnA3Wr5CennUcE:WzVNxIT5+WUlv/fA30Co

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de294488ed0025166a0bd3aed59cd243_JaffaCakes118

Files

de294488ed0025166a0bd3aed59cd243_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1a35c0f1d10d16ed10da4b47f13fe6d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
HeapSize
ExitProcess
GetEnvironmentStringsW
GetCurrentThreadId
GetLastError
EnterCriticalSection
WaitForSingleObject
WaitForMultipleObjects
LoadResource
SetFilePointer
FindClose
CloseHandle
MulDiv
GetSystemTimeAsFileTime
GlobalFree
FormatMessageW
CreateEventW
GetModuleFileNameW
GetCommandLineW
FindResourceW
FindFirstFileW
MultiByteToWideChar
GetStringTypeW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
FileTimeToLocalFileTime
GetProcAddress
SetLastError
EncodePointer
DecodePointer
GetModuleHandleExW
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapAlloc
HeapReAlloc
LCMapStringW
CreateFileW

shell32

SHGetSpecialFolderPathW
SHGetPathFromIDListW
ShellAboutW
ShellExecuteW
SHPathPrepareForWriteW

comdlg32

PrintDlgW

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.8x98ae
Size: 361KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdhwa
Size: 377KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1a35c0f1d10d16ed10da4b47f13fe6d6

Headers

File Characteristics

Imports

kernel32

shell32

comdlg32

Sections

.text Size: 77KB - Virtual size: 77KB

.data Size: 19KB - Virtual size: 7.0MB

.idata Size: 2KB - Virtual size: 2KB

.xdata Size: 1024B - Virtual size: 724B

.8x98ae Size: 361KB - Virtual size: 360KB

.mdhwa Size: 377KB - Virtual size: 378KB

.text
Size: 77KB - Virtual size: 77KB

.data
Size: 19KB - Virtual size: 7.0MB

.idata
Size: 2KB - Virtual size: 2KB

.xdata
Size: 1024B - Virtual size: 724B

.8x98ae
Size: 361KB - Virtual size: 360KB

.mdhwa
Size: 377KB - Virtual size: 378KB