00f4c6558acc0d5cbc5858ae30a6260d_JaffaCakes118

General

Target

00f4c6558acc0d5cbc5858ae30a6260d_JaffaCakes118
Size

229KB
MD5

00f4c6558acc0d5cbc5858ae30a6260d
SHA1

7ca755fa507beeca1b85a13fb4b3566ae63df828
SHA256

cddcb43cc677afc8807e055d48f7ae1b4621fe3e9f5511a5422011c90b41b03a
SHA512

013ed1b2cfd76c5ad7d0c0310f5bfaf7daf08203bdf2e269ec24849e768c9d227d8b9e0020aa972cd6869439ee03d5f632571a8688500748f74d0b9411214b46
SSDEEP

6144:qQddk+nL0MqYVBBGMndw0KxiB7FOwmF6YQTM:lbk+ozeGMdw0Kxo7FOwm0M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f4c6558acc0d5cbc5858ae30a6260d_JaffaCakes118

Files

00f4c6558acc0d5cbc5858ae30a6260d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cafb1cf15a14ce26c2cee78acb60f024

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
VirtualQuery
WriteConsoleA
SetLocalTime
RtlUnwind
OpenSemaphoreA
WriteConsoleOutputCharacterA
GetCurrentProcess
GetProcAddress
VirtualAlloc
GetCurrentThreadId
LoadLibraryExW
HeapReAlloc
HeapAlloc
RtlZeroMemory
HeapLock
HeapFree
InterlockedExchange
GetModuleFileNameA
TerminateProcess
GetModuleHandleA
ExitProcess
LocalShrink
SetConsoleWindowInfo
InterlockedDecrement
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
ReadConsoleInputA
MoveFileW
GetConsoleScreenBufferInfo
QueryPerformanceCounter

wininet

UnlockUrlCacheEntryFileW
IncrementUrlCacheHeaderData
InternetQueryOptionW
InternetQueryOptionA
FtpSetCurrentDirectoryW
ShowClientAuthCerts
CreateUrlCacheGroup
GetUrlCacheEntryInfoExW
InternetGetConnectedStateExA
DeleteUrlCacheEntryA
HttpQueryInfoA
HttpCheckDavCompliance
InternetCrackUrlA
InternetSecurityProtocolToStringA
UrlZonesDetach
FtpGetFileEx
FtpFindFirstFileA
InternetSetFilePointer
FindNextUrlCacheEntryExA
HttpEndRequestA
InternetReadFileExW
FtpPutFileA
FtpSetCurrentDirectoryA

gdi32

ExtCreateRegion
DeleteColorSpace
GdiGetBatchLimit
GetCharWidth32W
CreateScalableFontResourceW
GetWinMetaFileBits
DeleteObject
PtInRegion
GetViewportOrgEx
GetCharABCWidthsA
GdiPlayJournal
ChoosePixelFormat
AnimatePalette
PlayMetaFileRecord
CopyMetaFileA

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cafb1cf15a14ce26c2cee78acb60f024

Headers

File Characteristics

Imports

kernel32

wininet

gdi32

Sections

.text Size: 96KB - Virtual size: 96KB

.data Size: 128KB - Virtual size: 127KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 96KB - Virtual size: 96KB

.data
Size: 128KB - Virtual size: 127KB

.rsrc
Size: 3KB - Virtual size: 3KB