e0e5f1f111c2b2a2bb4318f3a43da1c0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e0e5f1f111c2b2a2bb4318f3a43da1c0_JaffaCakes118
Size

477KB
MD5

e0e5f1f111c2b2a2bb4318f3a43da1c0
SHA1

6c66eb4e35fa5357ccf73d573b4c626c571bce61
SHA256

a85a45e7b6341040592906b76f0aca83747272178db1e0c0666311f270d7a0d7
SHA512

c82048c651b4f80cc5dbc9c53f4c40adbdbc1fb4c37478f8c9ea9a2ba4d8ae035ee24c4608dcc701f661d69c549f910682a2c2db7d5f2b08daf200709fb0a4f8
SSDEEP

12288:qKd9wmoEMgrfrvlNRpLsCuvXJL1Eb5CmQVj01KYZ:qGHoEfD7LzcJL1EbkmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0e5f1f111c2b2a2bb4318f3a43da1c0_JaffaCakes118

Files

e0e5f1f111c2b2a2bb4318f3a43da1c0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2a347ac949f0b7e501c73f0d28b55a9f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetTickCount
GetVersionExA
ExitProcess
WaitForSingleObjectEx
TerminateProcess
QueryPerformanceCounter
GetVersionExW
Sleep
GetModuleHandleW
HeapAlloc
IsDebuggerPresent
WaitForSingleObject
GetCurrentProcess
FreeLibrary
MultiByteToWideChar
VirtualAlloc
GetCommandLineW
InterlockedDecrement
CloseHandle
InterlockedIncrement
CreateEventW
InterlockedExchange
LeaveCriticalSection
WriteFile
GetEnvironmentStringsW
GetModuleHandleA
GetStdHandle
DeleteCriticalSection
RaiseException
LoadLibraryA
WriteConsoleW
SetFilePointerEx
FindClose
GetEnvironmentStrings
SetStdHandle
GetConsoleMode
GetLastError
SetLastError
GetCurrentThread
GetCurrentThreadId
EncodePointer
DecodePointer
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
WideCharToMultiByte
GetProcessHeap
GetFileType
GetStartupInfoW
GetModuleFileNameW
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateSemaphoreW
EnterCriticalSection
FatalAppExitA
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsProcessorFeaturePresent
SetConsoleCtrlHandler
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapReAlloc
GetStringTypeW
HeapSize
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
CreateFileW

shlwapi

PathGetDriveNumberA

iphlpapi

SetIpNetEntry

scarddlg

ord2

Sections

.text
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a347ac949f0b7e501c73f0d28b55a9f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

iphlpapi

scarddlg

Sections

.text Size: 427KB - Virtual size: 426KB

.data Size: 37KB - Virtual size: 37KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 427KB - Virtual size: 426KB

.data
Size: 37KB - Virtual size: 37KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 6KB - Virtual size: 5KB