14da825182c801746724ef1537b4517a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

14da825182c801746724ef1537b4517a_JaffaCakes118
Size

302KB
MD5

14da825182c801746724ef1537b4517a
SHA1

d77a119fb0a9668ebb8cdfc66b38c1fc907128ba
SHA256

780949fc2fc3545591b4473f407f3e8834baf0e8360be5abc50b1596c4b4dc9a
SHA512

54c087b4e45e7313926a6ddd01d1e28e40af49bead26cb0d80432e15a79b2c581540750c9612e237fdf0ec9244eac049f8c1fadbf797b2e5ef8a0bad2b61ae78
SSDEEP

6144:Sr7beYd6upMOOsrLJffxOD3pZSVrdoTeJsVkbE9ucqe7fWJGflTvuLE:Sr7yFf0LJffxOD5ZSRdoTeq59ufe7fWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14da825182c801746724ef1537b4517a_JaffaCakes118

Files

14da825182c801746724ef1537b4517a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3c82a3e3d902843c8be455bba2a0507b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
ReadFile
VirtualFree
QueryDosDeviceA
GetFileSize
DeviceIoControl
FindNextFileA
VirtualAlloc
GetFullPathNameA
WriteFile
CloseHandle
RtlUnwind
CreateEventA
GetTimeZoneInformation
FreeLibrary
DuplicateHandle
GetLogicalDrives
ResetEvent
GetCurrentThreadId
OutputDebugStringA
DeleteFileA
FlushFileBuffers
WideCharToMultiByte
CreateFileA
CreateThread
IsBadCodePtr
GetSystemTime
WaitForSingleObject
SystemTimeToFileTime
EnterCriticalSection
FindClose
SetFilePointer
GetFileTime
DeleteCriticalSection
LeaveCriticalSection
FindFirstFileA
GetSystemTimeAsFileTime
GetModuleHandleA
UnhandledExceptionFilter
FileTimeToSystemTime
CreateMutexA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

ole32

CoInitialize
CoUninitialize

user32

GetUserObjectInformationA
MessageBoxA
GetProcessWindowStation

msvcrt

_XcptFilter
malloc
fopen
_snprintf
swprintf
fflush
wcsncpy
_purecall
__CxxFrameHandler
printf
localtime
rand
strncmp
_errno
ctime
fseek
toupper
wcsstr
memmove
free
strncpy
strstr
time
fprintf
_CxxThrowException
_splitpath
memcpy
vsprintf
_initterm
ftell
fread
_wcsicmp
fclose
_strupr
_stricmp
srand
_amsg_exit
calloc
sprintf
memset

esent

JetCreateIndex
JetDelete
JetOpenFileSectionInstance
JetOpenTempTable
JetCreateIndex2
JetAddColumn
JetOSSnapshotFreeze
JetEnableMultiInstance
JetOpenFile
JetDeleteColumn2
JetDBUtilities
JetBeginTransaction
JetGetSecondaryIndexBookmark
JetOpenTempTable3
JetRestore
JetRestoreInstance
JetExternalRestore2
JetSetCurrentIndex
JetGetTableIndexInfo
JetMakeKey
JetDetachDatabase
JetStopServiceInstance

iprtprio

GetPriorityInfo
SetPriorityInfo

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c82a3e3d902843c8be455bba2a0507b

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

user32

msvcrt

esent

iprtprio

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 275KB - Virtual size: 461KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 275KB - Virtual size: 461KB

.rsrc
Size: 3KB - Virtual size: 2KB