0e5ab3279027155d641262c939e0e8b2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0e5ab3279027155d641262c939e0e8b2_JaffaCakes118
Size

96KB
MD5

0e5ab3279027155d641262c939e0e8b2
SHA1

b1e4b0a9bea0d804643d7fa19c2d75f3d6824ee7
SHA256

c7fd7baafafff3aca0a7535c7267a08aed2b9cfd54203e6e6c571268f72a3efd
SHA512

b6e3fd24b9762e225ce68f907a39109e7b7fb97da0becfa8a43589fc4327d910e0fae0e6cca6da81d79a0d8e7660a8cd20ee52cfe65dfc24559ebc5a8d1adb86
SSDEEP

1536:NFoprIrcedygVPeJZTTRTNS4cplV1MLEBSiued0J8rfqb:rop/IyVJtTRgTlgcaed0Mfqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e5ab3279027155d641262c939e0e8b2_JaffaCakes118

Files

0e5ab3279027155d641262c939e0e8b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a893fc1a28c5edfb0e4beb2fc33cfde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

javac2.pdb

Imports

kernel32

TlsGetValue
GetModuleFileNameA
FileTimeToLocalFileTime
TlsAlloc
GetSystemTimeAsFileTime
GetDriveTypeA
GetLocaleInfoA
HeapAlloc
TerminateProcess
GetStringTypeA
FreeLibrary
UnhandledExceptionFilter
QueryPerformanceCounter
SetEndOfFile
GetTimeZoneInformation
CompareStringA
WideCharToMultiByte
SetFilePointer
GetFileType
CompareStringW
GetTickCount
SetHandleCount
WriteFile
LCMapStringA
FreeEnvironmentStringsA
GetCurrentThreadId
VirtualFree
GetCurrentDirectoryA
DeleteCriticalSection
ReadFile
CreateFileA
GetEnvironmentStrings
FormatMessageA
GetExitCodeProcess
FileTimeToSystemTime
GetLastError
CloseHandle
FindClose
RtlUnwind
TlsFree
GetCurrentProcess
GetCurrentDirectoryW
LCMapStringW
SetLastError
SetEnvironmentVariableW
LocalFree
SetStdHandle
HeapDestroy
LoadLibraryA
GetFileAttributesA
GetACP
LeaveCriticalSection
GetSystemInfo
FlushFileBuffers
GetEnvironmentStringsW
ExitProcess
FreeEnvironmentStringsW
GetStringTypeW
EnterCriticalSection
HeapCreate
ExitThread
GetModuleHandleA
GetProcAddress
QueryPerformanceFrequency
HeapSize
InitializeCriticalSection
MultiByteToWideChar
WaitForSingleObject
GetCPInfo
HeapReAlloc
GetVersionExA
TlsSetValue
GetStartupInfoA
GetStdHandle
HeapFree
InterlockedExchange
FindNextFileA
SetEnvironmentVariableA
IsValidLanguageGroup
FreeConsole
GetOEMCP
GetExitCodeThread
FindFirstFileA
GetCommandLineA
CreateProcessA

advapi32

RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fdata
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a893fc1a28c5edfb0e4beb2fc33cfde

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 76KB - Virtual size: 72KB

.data Size: 4KB - Virtual size: 1.0MB

fdata Size: 4KB - Virtual size: 640B

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 76KB - Virtual size: 72KB

.data
Size: 4KB - Virtual size: 1.0MB

fdata
Size: 4KB - Virtual size: 640B

.rsrc
Size: 8KB - Virtual size: 4KB