110e93a4a86baf8dd7d86350c753dbab_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

110e93a4a86baf8dd7d86350c753dbab_JaffaCakes118
Size

430KB
MD5

110e93a4a86baf8dd7d86350c753dbab
SHA1

3de878fccfbecfefe1c10d05666abfbd47f9b7b1
SHA256

e34ee139cb01f282602458d24b81a16bce1832da3a99873ab8dd3e8df293815b
SHA512

83201d5e40fec73e400abe6072fd0c46e312adf180b97f7389b34fce139c0570fd9e2e1faa97a4c41def353eb77c969d42762802ea5a9a180431326882216bd7
SSDEEP

12288:UlAV2ry7WtLzcyYVRfTWsAlthuUfxGJI/Buv2IOGmYp:mbLAHjytHuvCYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
110e93a4a86baf8dd7d86350c753dbab_JaffaCakes118

Files

110e93a4a86baf8dd7d86350c753dbab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1239e3cf71621ca53c28b5e2063ebbbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapCreate
VirtualFree
LoadLibraryW
GetProcAddress
HeapValidate
HeapReAlloc
OutputDebugStringA
FlushFileBuffers
GetModuleHandleW
GetCurrentProcessId
RaiseException
CompareStringW
GetCurrentThread
SetConsoleCtrlHandler
SetStdHandle
InitializeCriticalSectionAndSpinCount
lstrcmpW
SetEnvironmentVariableA
SetUnhandledExceptionFilter
WideCharToMultiByte
SetHandleCount
FreeEnvironmentStringsW
GetStringTypeA
InterlockedIncrement
CompareStringA
GetLocaleInfoW
CreateSemaphoreA
UnhandledExceptionFilter
ExitProcess
GetTickCount
WriteFile
OutputDebugStringW
HeapFree
GetCommandLineA
GetModuleFileNameA
GetStartupInfoA
LoadLibraryA
QueryPerformanceCounter
WriteConsoleW
VirtualAlloc
GetUserDefaultLCID
FreeEnvironmentStringsA
SetLastError
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
TlsFree
GetConsoleCP
GetDateFormatA
GetLastError
LCMapStringA
SetFilePointer
HeapDestroy
FreeLibrary
GetSystemTimeAsFileTime
GetConsoleMode
DeleteCriticalSection
HeapLock
GetConsoleOutputCP
GetEnvironmentStrings
DebugBreak
LeaveCriticalSection
IsBadReadPtr
TlsAlloc
CreateFileA
GetFileType
LCMapStringW
TlsGetValue
GetTimeZoneInformation
MultiByteToWideChar
GetLocaleInfoA
CreateEventW
InterlockedExchange
GetOEMCP
Sleep
lstrlenA
IsDebuggerPresent
EnumSystemLocalesA
EnterCriticalSection
InterlockedDecrement
GetTimeFormatA
HeapAlloc
IsValidLocale
GetDriveTypeA
MoveFileW
GetStringTypeW
VirtualQuery
GetModuleHandleA
IsValidCodePage
GetModuleFileNameW
GetStdHandle
RtlUnwind
WriteConsoleA
TlsSetValue
SetCurrentDirectoryW
HeapSize
GetEnvironmentStringsW
CloseHandle
GetCPInfo
GetACP

gdi32

CreateEnhMetaFileW
CreateDIBSection
StretchBlt
GetLayout
SetColorSpace
GetMetaFileA
CreateDIBitmap
CreateICA
GetWindowOrgEx
PolyTextOutW
ExtCreateRegion
GetRasterizerCaps
EndPath
SetColorAdjustment
SetMagicColors
GetObjectW
CreateRoundRectRgn
GetGlyphOutlineA
StartDocA
SetMetaRgn
GetNearestColor
SetTextAlign

Sections

.text
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 153KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1239e3cf71621ca53c28b5e2063ebbbb

Headers

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 274KB - Virtual size: 273KB

.data Size: 153KB - Virtual size: 167KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 274KB - Virtual size: 273KB

.data
Size: 153KB - Virtual size: 167KB

.rsrc
Size: 2KB - Virtual size: 2KB