047c870ec08edb45d0a0b9cf245238c3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

047c870ec08edb45d0a0b9cf245238c3_JaffaCakes118
Size

435KB
MD5

047c870ec08edb45d0a0b9cf245238c3
SHA1

74837f73dcbfbfe72512d8de2f02f78600256ae6
SHA256

eb17e9d97c4d1b8113b1e4a1d39fef704507fca9b5b4c71e7e9ae48b7d2ec0b2
SHA512

9dbd972d0d3683c3ce58f60363c53e8c3eb7ab0ff2f2328a43401932a21d3b1150fd980851116be0b9bf9ca698593e355c5b0a6721412c9dd7038b483c3a7733
SSDEEP

12288:dm+JqV93MICzMcNcZTXYDmywwmps4nTWFW:dlJqV0YLFXA5w7nTWF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
047c870ec08edb45d0a0b9cf245238c3_JaffaCakes118

Files

047c870ec08edb45d0a0b9cf245238c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34a819dc86dd5900ed78a4e4b4864fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
IsValidLocale
LCMapStringW
VirtualProtect
GetProcAddress
LeaveCriticalSection
HeapReAlloc
WriteFile
FreeEnvironmentStringsW
GetTimeZoneInformation
GetCurrentProcessId
HeapAlloc
CompareStringA
GetLocaleInfoA
TlsGetValue
GetModuleHandleA
MultiByteToWideChar
CreateFileMappingA
WriteConsoleW
TlsFree
GetStartupInfoA
InitializeCriticalSection
GetCPInfo
HeapSize
SetHandleCount
GetCompressedFileSizeA
GetSystemInfo
WritePrivateProfileSectionW
GetEnvironmentStringsA
ExitProcess
GetTickCount
GetSystemDefaultLCID
IsBadWritePtr
HeapFree
GetEnvironmentStrings
GetModuleFileNameA
HeapCreate
LoadLibraryA
QueryPerformanceCounter
GetDateFormatA
VirtualAlloc
FindResourceExA
GetACP
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetEnvironmentStringsW
GetLocaleInfoW
GetStringTypeA
TlsSetValue
RtlMoveMemory
LCMapStringA
GetCommandLineA
GetSystemTimeAsFileTime
GetFileType
EnterCriticalSection
GetLongPathNameW
GetLastError
GetOEMCP
DeleteCriticalSection
VirtualFree
SetLastError
HeapDestroy
CompareStringW
GetStdHandle
UnhandledExceptionFilter
OpenMutexA
IsValidCodePage
WideCharToMultiByte
GetStringTypeW
CreateSemaphoreA
InterlockedExchange
GetUserDefaultLCID
GetTimeFormatA
GetCurrentThread
TlsAlloc
FreeEnvironmentStringsA
EnumSystemLocalesA
SetEnvironmentVariableA

shell32

FindExecutableW
SHGetDataFromIDListW
SHBrowseForFolder
DoEnvironmentSubstW
ExtractAssociatedIconW
SHAddToRecentDocs
ShellExecuteExA
SHInvokePrinterCommandA
SHQueryRecycleBinA
SHGetFileInfo
ShellExecuteW
SHFileOperationA
ExtractAssociatedIconExW
SHFileOperation
SHGetNewLinkInfo
SHGetDataFromIDListA
DragFinish
SHFreeNameMappings
SHGetFileInfoW
SHGetMalloc

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34a819dc86dd5900ed78a4e4b4864fe

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 117KB - Virtual size: 116KB

.data Size: 308KB - Virtual size: 308KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 117KB - Virtual size: 116KB

.data
Size: 308KB - Virtual size: 308KB

.rsrc
Size: 8KB - Virtual size: 8KB