fe5429ab64a74a0d6f36d3ffb384e807_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fe5429ab64a74a0d6f36d3ffb384e807_JaffaCakes118
Size

202KB
MD5

fe5429ab64a74a0d6f36d3ffb384e807
SHA1

a4036eee39637f6722d94299f4e0aab90e7a3305
SHA256

dc472da1c1c3abca694aebb1dc27bd2b7ae224119ee9fcd1caffd9305e9b20fa
SHA512

878f3d825c6d6e5a1e6057e35ae9cf21640352c1d2ef3d94c6b7d1a985936d420fdcfc4a73a418df54c1440b5c7c66baa77cd674705ff69603146021fe2bcdcd
SSDEEP

3072:UYhLT4Wqg5yXSIUy4ZTmEneHzrqzBC4aT56Im8vwQjULhaqgVm:1hn4I1TZiSiqzraT5g8vwQjU9Lg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
fe5429ab64a74a0d6f36d3ffb384e807_JaffaCakes118

Files

fe5429ab64a74a0d6f36d3ffb384e807_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c51a1ed7b0c59196ee3c3f4166a41539

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsA
ExitProcess
GetSystemTimes
LoadLibraryA
GetProcAddress
FillConsoleOutputCharacterA
GlobalAlloc
GetTickCount
GetModuleHandleW
AddAtomW
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryW
FindFirstChangeNotificationA
FindAtomW
GetLastError
LocalFree
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
Sleep
HeapSize

user32

GetRawInputDeviceList
GetRawInputDeviceInfoA
UpdateWindow
CreateWindowExW
LoadIconW
GetNextDlgGroupItem
GetAltTabInfoW
GetMessageExtraInfo
SetParent
SwitchDesktop
GetThreadDesktop

gdi32

FillPath
EndPath
SetViewportOrgEx
BitBlt

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mysec2
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mysec3
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c51a1ed7b0c59196ee3c3f4166a41539

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 140KB - Virtual size: 139KB

.data Size: 6KB - Virtual size: 162KB

.mysec2 Size: 512B - Virtual size: 2B

.mysec3 Size: 512B - Virtual size: 4B

.rsrc Size: 48KB - Virtual size: 48KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 140KB - Virtual size: 139KB

.data
Size: 6KB - Virtual size: 162KB

.mysec2
Size: 512B - Virtual size: 2B

.mysec3
Size: 512B - Virtual size: 4B

.rsrc
Size: 48KB - Virtual size: 48KB

.reloc
Size: 6KB - Virtual size: 5KB