ee655298386a87abb02860e9aff3a1d1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ee655298386a87abb02860e9aff3a1d1_JaffaCakes118
Size

313KB
MD5

ee655298386a87abb02860e9aff3a1d1
SHA1

3c4731ac7a563bbb3f0d0ff83e662b0a1d6092c1
SHA256

76d38234c0aa2692418edd02ab9ade3f79ba3ef84fd753385ba414e429329c23
SHA512

282405d2faff65ba06a476743ceb36d1879b0c2c929af3af71201ec13bac1bca13848c79cc91cffd64a0ec0258bae13edc6f62af98e986ce4700811189b5d59f
SSDEEP

6144:LFOztnVeEta0etzIcaM++/F8waJgIiFxqkcEHWWHQCLOsY8NDWczyOIipvxVKnzl:LFOztnAEs0etbaMv/+Wf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee655298386a87abb02860e9aff3a1d1_JaffaCakes118

Files

ee655298386a87abb02860e9aff3a1d1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b90c232794bc8ac9d05c1cd95daebb1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

kernel32

HeapSize
CompareStringA
GetStringTypeW
GetStringTypeA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoA
GetACP
GetProcAddress
CreateDirectoryW
CreateEventW
CreateFileW
CreateProcessW
DeleteFileW
EnumCalendarInfoW
FindResourceW
FormatMessageW
FreeLibrary
GetCPInfo
LoadResource
LockResource
ReadFile
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SizeofResource
VirtualProtect
WaitForSingleObject
WriteFile
CloseHandle
GetStdHandle
RaiseException
UnhandledExceptionFilter
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
VirtualQuery
GetCurrentThreadId
GetVersion
QueryPerformanceCounter
GetTickCount
GetSystemInfo
VirtualAlloc
VirtualFree
Sleep
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
GetModuleHandleA
HeapAlloc
GetModuleHandleW
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapCreate
HeapFree
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
GetOEMCP
IsValidCodePage
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
LCMapStringW

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b90c232794bc8ac9d05c1cd95daebb1b

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.text Size: 87KB - Virtual size: 86KB

.rdata Size: 206KB - Virtual size: 206KB

.data Size: 4KB - Virtual size: 94KB

.rsrc Size: 14KB - Virtual size: 14KB

.text
Size: 87KB - Virtual size: 86KB

.rdata
Size: 206KB - Virtual size: 206KB

.data
Size: 4KB - Virtual size: 94KB

.rsrc
Size: 14KB - Virtual size: 14KB