08dfec3eb29d5785117ea9d0955f1928_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

08dfec3eb29d5785117ea9d0955f1928_JaffaCakes118
Size

255KB
MD5

08dfec3eb29d5785117ea9d0955f1928
SHA1

39674973f467aa65cfdca27d096356828bd72a6c
SHA256

e70158982553fec99dd1a335b89e4846b53278b590632d3a902faeb52c2381d9
SHA512

aac4c78f16296c4a572fdd30c59ba611b01651f6be6efc6dc93097759551c5b13224ecc1c088a9704c81831cbc0afc4eedbd29ebb287947afea08dcd80769273
SSDEEP

3072:47jxlwUzfl46zOlrxd7LQe+aX3K10m8v7Sxa:yxlZO3lLLF+aX360my7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08dfec3eb29d5785117ea9d0955f1928_JaffaCakes118

Files

08dfec3eb29d5785117ea9d0955f1928_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fab63f5a4a28536b1b3d87dbadc944c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
WriteProcessMemory
WriteFile
WinExec
VirtualFreeEx
VirtualAllocEx
TerminateProcess
SuspendThread
Sleep
SizeofResource
SetThreadContext
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesA
SetEndOfFile
ResumeThread
ReadFile
OpenProcess
OpenFileMappingA
MapViewOfFile
LockResource
LoadResource
LoadLibraryA
IsBadReadPtr
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetThreadContext
GetTempPathA
GetTempFileNameA
GetSystemDirectoryA
GetShortPathNameA
GetProcAddress
GetModuleHandleA
GetLocalTime
GetFileTime
GetFileSize
GetDriveTypeA
GetCurrentProcessId
GetCurrentProcess
GetComputerNameA
GetACP
FreeResource
FreeLibrary
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
DuplicateHandle
DeleteFileA
CreateThread
CreateProcessA
CreateFileMappingA
CreateFileA
CopyFileA
CompareStringA
CloseHandle

user32

GetKeyboardType
MessageBoxA
CharNextA
CreateWindowExA
UpdateWindow
TranslateMessage
SendMessageA
RegisterClassA
PostThreadMessageA
PostMessageA
PeekMessageA
LoadCursorA
GetWindowTextA
GetMessageA
FindWindowExA
FindWindowA
DispatchMessageA
DefWindowProcA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegCloseKey
FreeSid

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

mpr

WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
WNetCancelConnectionA
WNetCancelConnection2A
WNetAddConnection2A

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

wsock32

WSACleanup
WSAStartup
gethostname
gethostbyname
inet_ntoa

winmm

waveOutSetVolume
waveOutGetVolume

Sections

.Upack
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2fab63f5a4a28536b1b3d87dbadc944c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

mpr

version

wsock32

winmm

Sections

.Upack Size: 184KB - Virtual size: 184KB

.rsrc Size: 67KB - Virtual size: 67KB

.Upack
Size: 184KB - Virtual size: 184KB

.rsrc
Size: 67KB - Virtual size: 67KB