135285499476889b341cbcaf9e480ad6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

135285499476889b341cbcaf9e480ad6_JaffaCakes118
Size

209KB
MD5

135285499476889b341cbcaf9e480ad6
SHA1

533b02697dd9786e2122967ca781cb17d5a0137e
SHA256

6254b5b2a78652569e2f1827d86e9acca51bf6a0a206c539984bab4e86d071fb
SHA512

7006e8749164306a3785e10818a2f35cd75e03a9e5342f02ac725b4e00d626e93e8b4a729ac6f9870ede1f31c6d0d7c793b338278e25d52b74abc798057863d5
SSDEEP

3072:PQMCcEgPQdzhqE8TMs+NmUTyEKHmJa+O6eP0ccTBK6A5zkS2jbxWGq:PQMCc/oxITElTEHP4e8n1wkSbGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
135285499476889b341cbcaf9e480ad6_JaffaCakes118

Files

135285499476889b341cbcaf9e480ad6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

107758b0bc095db21cd5b842c9b970e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrcatA
GetModuleFileNameA
GetFileAttributesA
lstrcpynA
lstrlenA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LoadLibraryA
GetACP
GetOEMCP
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
RtlUnwind
GetLocaleInfoW
CreateFileW
VirtualAllocEx
CreateFileA

user32

LoadIconA
LoadCursorA
EndPaint
PostQuitMessage
DefWindowProcA

gdi32

GetStockObject
CreateEnhMetaFileA
MoveToEx
LineTo
CloseEnhMetaFile
DeleteEnhMetaFile

advapi32

RegOpenKeyExA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data7
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

107758b0bc095db21cd5b842c9b970e2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 165KB - Virtual size: 164KB

.data7 Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 512B - Virtual size: 408B

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 165KB - Virtual size: 164KB

.data7
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 512B - Virtual size: 408B