ea734563e4b9084ae2f4a682f4630b5f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ea734563e4b9084ae2f4a682f4630b5f_JaffaCakes118
Size

255KB
MD5

ea734563e4b9084ae2f4a682f4630b5f
SHA1

3b910c266509d73217eedd7ad12cc1aa73ddc603
SHA256

7b80de33f9a7cf18003ba48577d6f36f1fbdca480d113bfe7b7c3f0ff43f4d9b
SHA512

e42de35635028a7b23c96b9da045350f6a7884ff6b75005e6ed100d8afbeab38d2e2bef70ce8caec29132f52b0293430cb6c9037f8696be5e508473674d92c5b
SSDEEP

6144:LEpfkHTHxBxcz3G+GOv3pHS+rwfgfVnuTJT+:VHTHxBxczG+GOv3pHS+rp9uk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea734563e4b9084ae2f4a682f4630b5f_JaffaCakes118

Files

ea734563e4b9084ae2f4a682f4630b5f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

02638fc7eba15a641aeebb7379ba2741

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
ReadFile
CopyFileA
WinExec
SetFilePointer
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetCurrentProcess
GetLastError
IsDebuggerPresent
RaiseException
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
LoadLibraryA
RtlUnwind
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
HeapFree
HeapAlloc
GetProcessHeap
VirtualQuery
FreeLibrary
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
FlushFileBuffers
GetConsoleCP
GetConsoleMode
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
InitializeCriticalSectionAndSpinCount
SetStdHandle
CreateFileA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP

user32

TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetMessageA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA

shell32

SHFileOperationA

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02638fc7eba15a641aeebb7379ba2741

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 134KB - Virtual size: 133KB

.rdata Size: 38KB - Virtual size: 37KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 78KB - Virtual size: 77KB

.text
Size: 134KB - Virtual size: 133KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 78KB - Virtual size: 77KB