fa5dfe552c3b548f8f1918db9ff16809_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fa5dfe552c3b548f8f1918db9ff16809_JaffaCakes118
Size

506KB
MD5

fa5dfe552c3b548f8f1918db9ff16809
SHA1

741c3a7585b6073e1d504fa48c42eb6fd6a9aeed
SHA256

3ee1905126b6928f4db7afc4cdd14adb931af5cb60755e7d415d83c015df313e
SHA512

a29375f85c03e5814326a9ae46c8b7856005c43dbd26a93bc5363191067c956364ea2a93e165d165566b2f81f8c3f0f76894ce914d9cf940238fd037017710a8
SSDEEP

12288:I+D4ykIucsIeKMVU0tyG9X227vEvvt7ojDYZYXic:I+DDkTcsIeKOUsN9X22KaDhy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa5dfe552c3b548f8f1918db9ff16809_JaffaCakes118

Files

fa5dfe552c3b548f8f1918db9ff16809_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8ae23ecc2afa833c7a46f3cfc706bff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

GetStartupInfoA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
RtlUnwind
WriteConsoleA
GetEnvironmentStringsW
GlobalAddAtomW
lstrcmpiA
HeapAlloc
GetSystemTimeAsFileTime
GetEnvironmentStrings
GetAtomNameA
GetTimeFormatA
TlsSetValue
ReadConsoleInputW
HeapReAlloc
GetOEMCP
InterlockedIncrement
TerminateProcess
SetConsoleCtrlHandler
GetLastError
LCMapStringW
UnhandledExceptionFilter
GetProcAddress
ReadFile
GetModuleHandleA
QueryPerformanceCounter
IsValidCodePage
GetCPInfo
InterlockedExchange
FreeEnvironmentStringsA
IsValidLocale
LockResource
GetStdHandle
SetHandleCount
VirtualFree
GetLocaleInfoW
VirtualAlloc
GetCurrentThreadId
ReadConsoleOutputA
GetCurrentThread
TlsFree
FreeEnvironmentStringsW
WriteFile
HeapFree
DuplicateHandle
HeapDestroy
GetCurrentProcess
GetTickCount
SetUnhandledExceptionFilter
TlsAlloc
CloseHandle
SetStdHandle
IsDebuggerPresent
GetACP
SetLastError
GetConsoleCursorInfo
GetConsoleOutputCP
ExitProcess
CompareStringW
CreateFileA
GetUserDefaultLCID
DeleteFiber
InterlockedDecrement
LCMapStringA
GetConsoleMode
GlobalUnfix
LeaveCriticalSection
WriteConsoleInputA
MultiByteToWideChar
FlushInstructionCache
EnumDateFormatsW
HeapCreate
TlsGetValue
VirtualQuery
GetModuleFileNameA
OpenMutexA
EnumDateFormatsExW
CompareStringA
SetFilePointer
WideCharToMultiByte
EnumSystemLocalesA
SetEndOfFile
DeleteCriticalSection
Sleep
GetModuleHandleW
GetStringTypeW
LoadLibraryA
FindResourceExW
GetStringTypeA
GetCommandLineA
GetCurrentProcessId
SetEnvironmentVariableA
GetLocaleInfoA
FlushFileBuffers
CreateMutexA
FreeLibrary
GetConsoleCP
WriteConsoleW
HeapSize
EnterCriticalSection
SystemTimeToFileTime
GetFileType
CreateFileMappingA
GetTimeZoneInformation

user32

RegisterClassA
GetPropA
GetKeyboardState
RegisterClassExA
LoadIconA
SendNotifyMessageW
CharUpperA
wsprintfA
DrawStateW
GetDC
GetParent

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8ae23ecc2afa833c7a46f3cfc706bff

Headers

File Characteristics

Imports

comctl32

kernel32

user32

Sections

.text Size: 176KB - Virtual size: 176KB

.rdata Size: 9KB - Virtual size: 26KB

.data Size: 314KB - Virtual size: 313KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 176KB - Virtual size: 176KB

.rdata
Size: 9KB - Virtual size: 26KB

.data
Size: 314KB - Virtual size: 313KB

.rsrc
Size: 5KB - Virtual size: 4KB