0f0a2ac5a546e40b260027fa90c96a8a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0f0a2ac5a546e40b260027fa90c96a8a_JaffaCakes118
Size

1.1MB
MD5

0f0a2ac5a546e40b260027fa90c96a8a
SHA1

dd79508ade72fe72ae4cd8ab24be675cb14374c3
SHA256

e198c0f49e45ddb65fe46fddf7d20f5cca5da44a23a3a111d627fdd92bed3e90
SHA512

813abbc53bd25f40e6f9c782d1b8d5abc870cb32d5ea15dc10ce012ecd94fd9885e9ea46f4a9b4b14deb4451dd6cfe10626ecc74df0bbd388a1ea2cfecda041d
SSDEEP

24576:BMrwUTVW8b2wgp7UPQ3AndHiuItLKjWm89:BMrjnguPbCuILw89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f0a2ac5a546e40b260027fa90c96a8a_JaffaCakes118

Files

0f0a2ac5a546e40b260027fa90c96a8a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

16f0ca4a6f8f4668f24f46b2f33d7c92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LocalFree
VirtualAlloc
HeapAlloc
HeapFree
GetCurrentThreadId
GetLastError
InitializeCriticalSectionAndSpinCount
ReadFile
SetFilePointer
CloseHandle
GetSystemTimeAsFileTime
SystemTimeToFileTime
FileTimeToLocalFileTime
FormatMessageW
LoadLibraryW
GetModuleHandleW
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
GetStringTypeW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapReAlloc
CreateFileW

wininet

InternetConnectW
HttpAddRequestHeadersW
HttpQueryInfoW

ole32

CoTaskMemFree
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemRealloc

shell32

SHBindToParent
SHCreateDirectoryExW
SHGetPathFromIDListW
Shell_NotifyIconW
ShellExecuteExW

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.5ydr28
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1go4s2
Size: 375KB - Virtual size: 374KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.4moai
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16f0ca4a6f8f4668f24f46b2f33d7c92

Headers

File Characteristics

Imports

kernel32

wininet

ole32

shell32

Sections

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 4KB - Virtual size: 6.4MB

.5ydr28 Size: 317KB - Virtual size: 317KB

.1go4s2 Size: 375KB - Virtual size: 374KB

.4moai Size: 247KB - Virtual size: 247KB

.rsrc Size: 108KB - Virtual size: 107KB

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 6.4MB

.5ydr28
Size: 317KB - Virtual size: 317KB

.1go4s2
Size: 375KB - Virtual size: 374KB

.4moai
Size: 247KB - Virtual size: 247KB

.rsrc
Size: 108KB - Virtual size: 107KB