fb15ecb4fefb5c02553904d8590395a2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fb15ecb4fefb5c02553904d8590395a2_JaffaCakes118
Size

148KB
MD5

fb15ecb4fefb5c02553904d8590395a2
SHA1

cfb33face734c27230250c903701ac169580e785
SHA256

f95af3e23bda0620d7191b8fc2e8e5a28d69b1079d1ee2d839b08c11a260b0ae
SHA512

f4ed1996652c7cf5e8f72b24d19a1b73172e384c7063a656fc041c82691e4519e245b43c1c7d617ca46c19c170301dfba06d387477b487538bfc372e9bdb7471
SSDEEP

3072:TiIugaY4CiAeB1NIkSzW7ucOF1HDkYte+rxfgDVrxQDan/:8pnAeVIVaurFpWDV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb15ecb4fefb5c02553904d8590395a2_JaffaCakes118

Files

fb15ecb4fefb5c02553904d8590395a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8677858c9724ddfb935f5b7166a7adfe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
GetFileSize
CreateFileW
SetFileAttributesA
GetFileAttributesA
WriteConsoleA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
SetEnvironmentVariableA
HeapAlloc
GetLocalTime
GetSystemTime
GetTimeZoneInformation

user32

ReleaseDC
GetClassInfoExA
GetCursorPos
GetMessageA
CallWindowProcW
AppendMenuA
TrackPopupMenu
GetFocus
RegisterClassExA
SetFocus
CharToOemA
DefWindowProcW
CreateWindowExA
GetWindowLongA
GetDC
GetAsyncKeyState
GetClassNameW
EnumWindows

ole32

OleInitialize
OleUninitialize
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

ws2_32

htonl
getservbyname
htons
recv
ntohs
send
recvfrom
WSAWaitForMultipleEvents
WSAAddressToStringA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8677858c9724ddfb935f5b7166a7adfe

Headers

File Characteristics

Imports

kernel32

user32

ole32

ws2_32

version

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 56KB - Virtual size: 131KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 56KB - Virtual size: 131KB

.rsrc
Size: 4KB - Virtual size: 2KB