f581b285f9b3ccee1ab2e7922d2bcdb5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f581b285f9b3ccee1ab2e7922d2bcdb5_JaffaCakes118
Size

459KB
MD5

f581b285f9b3ccee1ab2e7922d2bcdb5
SHA1

f13e00b6cee59788ec01ceb6c6ac5f8b5886d3dd
SHA256

933d5a9b9518536c9714db27d8327d293a2c95f9e05dadec31e7b8f9f830e51b
SHA512

8b76ff81f5660173f81c2c8bb245ae33b8b28265caaa5a22b8939bf6be71211ea67ed9b00934e5e88011d7eef36a0d951531f926c4361ebe8da7e105f8e7fd5e
SSDEEP

6144:UjLMltUEz/YdGvBxKnooF6vCSdsxmbAYZA+9rmzM8:UjwPDEdzog+vVtrI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f581b285f9b3ccee1ab2e7922d2bcdb5_JaffaCakes118

Files

f581b285f9b3ccee1ab2e7922d2bcdb5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

715470596d381c33aafdd3b4d9d121f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
HeapReAlloc
CreateFileA
SetDefaultCommConfigA
HeapCompact
CommConfigDialogA
lstrcpynA
HeapAlloc
WriteTapemark
InterlockedIncrement
SetConsoleTextAttribute
ZombifyActCtx
SetHandleInformation
WaitForSingleObject
SetEvent
GetModuleHandleW
GetProcessHeap
GetConsoleTitleA
ReadConsoleW
WaitNamedPipeW
WriteFile
FindActCtxSectionStringA
ActivateActCtx
FreeConsole
GetFileAttributesA
VerifyVersionInfoA
HeapQueryInformation
GetModuleFileNameW
LCMapStringA
ReleaseActCtx
SetLastError
AttachConsole
GetProcessHeaps
VerLanguageNameW
ResetEvent
GetAtomNameA
LocalAlloc
SetConsoleDisplayMode
OpenEventA
HeapLock
SetConsoleWindowInfo
GetTapeParameters
WaitForMultipleObjects
SetConsoleTitleW
GetModuleHandleA
CreateMutexA
GetConsoleTitleW
VirtualProtect
DeleteCriticalSection
ReleaseMutex
GetVersion
GetCurrentProcessId
GetPrivateProfileSectionW
WriteProcessMemory
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RaiseException
RtlUnwind
Sleep
GetProcAddress
ExitProcess
GetLastError
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringW

Exports

Exports

@SetViceCitiesz@0

Sections

.text
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wuve
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

715470596d381c33aafdd3b4d9d121f5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 398KB - Virtual size: 397KB

.data Size: 31KB - Virtual size: 5.3MB

.wuve Size: 512B - Virtual size: 1B

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 398KB - Virtual size: 397KB

.data
Size: 31KB - Virtual size: 5.3MB

.wuve
Size: 512B - Virtual size: 1B

.rsrc
Size: 28KB - Virtual size: 28KB