03856f22ee59fa326fb2b18fab3bd009_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

03856f22ee59fa326fb2b18fab3bd009_JaffaCakes118
Size

271KB
MD5

03856f22ee59fa326fb2b18fab3bd009
SHA1

0190be0bdf990e26397dbc2f548629c0c1635fe2
SHA256

ed05a1df00a83e258e4c2cfe0a75dc38ae810122d30482d2bc20d75e0262950d
SHA512

d8de31b0b93b9f32e11009992da7f72d8e7980443bd581e41c55f24e1329ae6fd88225299005b09bb80e84b0c327d80ff4c56b6510b607a00ae91fd9a37301ea
SSDEEP

3072:5De5IBx7m/Wpe5GP/Difd7r+rxHtQWrl83toz8FXu9IqY/AKtexfLjqcsGHG/BjX:5DPmc3W1yHst9F/C2e5XqoHCCxRjy5V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03856f22ee59fa326fb2b18fab3bd009_JaffaCakes118

Files

03856f22ee59fa326fb2b18fab3bd009_JaffaCakes118
.exe windows:5 windows x86 arch:x86

72bbdd00b322e70f59e8a95d25f454c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileType
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetUserDefaultLCID
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
ExitProcess
InitializeCriticalSection
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
RtlUnwind
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
CreateFileA
EnumSystemLocalesA
EnterCriticalSection
HeapReAlloc
DeleteCriticalSection

user32

LoadIconA
GetSystemMetrics
ShowCursor
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow

gdi32

GetStockObject

advapi32

RegOpenKeyW

ole32

CoTaskMemAlloc

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.4444419
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4444418
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4444417
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4444416
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4444415
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4444414
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4444413
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4444412
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4444411
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4444410
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444449
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444448
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444447
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444446
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444445
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444444
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444443
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444442
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.441441
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.344446
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.344445
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.344444
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.344443
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.344442
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.344441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.443441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.442441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.341441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72bbdd00b322e70f59e8a95d25f454c1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 237KB - Virtual size: 236KB

.4444419 Size: 512B - Virtual size: 100B

.4444418 Size: 512B - Virtual size: 100B

.4444417 Size: 512B - Virtual size: 100B

.4444416 Size: 512B - Virtual size: 100B

.4444415 Size: 512B - Virtual size: 100B

.4444414 Size: 512B - Virtual size: 100B

.4444413 Size: 512B - Virtual size: 100B

.4444412 Size: 512B - Virtual size: 100B

.4444411 Size: 512B - Virtual size: 100B

.4444410 Size: 512B - Virtual size: 100B

.444449 Size: 512B - Virtual size: 100B

.444448 Size: 512B - Virtual size: 100B

.444447 Size: 512B - Virtual size: 100B

.444446 Size: 512B - Virtual size: 100B

.444445 Size: 512B - Virtual size: 100B

.444444 Size: 512B - Virtual size: 100B

.444443 Size: 512B - Virtual size: 100B

.444442 Size: 512B - Virtual size: 100B

.441441 Size: 512B - Virtual size: 200B

.444441 Size: 512B - Virtual size: 100B

.344446 Size: 512B - Virtual size: 100B

.344445 Size: 512B - Virtual size: 100B

.344444 Size: 512B - Virtual size: 100B

.344443 Size: 512B - Virtual size: 100B

.344442 Size: 512B - Virtual size: 100B

.344441 Size: 512B - Virtual size: 100B

.443441 Size: 512B - Virtual size: 100B

.442441 Size: 512B - Virtual size: 100B

.341441 Size: 512B - Virtual size: 100B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 237KB - Virtual size: 236KB

.4444419
Size: 512B - Virtual size: 100B

.4444418
Size: 512B - Virtual size: 100B

.4444417
Size: 512B - Virtual size: 100B

.4444416
Size: 512B - Virtual size: 100B

.4444415
Size: 512B - Virtual size: 100B

.4444414
Size: 512B - Virtual size: 100B

.4444413
Size: 512B - Virtual size: 100B

.4444412
Size: 512B - Virtual size: 100B

.4444411
Size: 512B - Virtual size: 100B

.4444410
Size: 512B - Virtual size: 100B

.444449
Size: 512B - Virtual size: 100B

.444448
Size: 512B - Virtual size: 100B

.444447
Size: 512B - Virtual size: 100B

.444446
Size: 512B - Virtual size: 100B

.444445
Size: 512B - Virtual size: 100B

.444444
Size: 512B - Virtual size: 100B

.444443
Size: 512B - Virtual size: 100B

.444442
Size: 512B - Virtual size: 100B

.441441
Size: 512B - Virtual size: 200B

.444441
Size: 512B - Virtual size: 100B

.344446
Size: 512B - Virtual size: 100B

.344445
Size: 512B - Virtual size: 100B

.344444
Size: 512B - Virtual size: 100B

.344443
Size: 512B - Virtual size: 100B

.344442
Size: 512B - Virtual size: 100B

.344441
Size: 512B - Virtual size: 100B

.443441
Size: 512B - Virtual size: 100B

.442441
Size: 512B - Virtual size: 100B

.341441
Size: 512B - Virtual size: 100B

.rsrc
Size: 1KB - Virtual size: 1KB