2df7ec578caae783992339f37ba90042_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2df7ec578caae783992339f37ba90042_JaffaCakes118
Size

249KB
MD5

2df7ec578caae783992339f37ba90042
SHA1

591394ef7d92c12717982a2b6962475800536a06
SHA256

2998cb3529b30bb3fa3bbb882d8cc2978043ec50b3562c14329e244e3387e111
SHA512

86d93d2fdfe674d0361af6e65e5a1b97bb4401c358ffcbf9334049cb7d1b8725e1f3272056b11d215bc5b85b69eed406f2b8c3a8fd7c5461bbe1ab4e80340e71
SSDEEP

3072:qOahXpDvlupcYqmW3FLpqyw/toeKS7Jw68A9O:I5ljYqmW1LpqYe/1w6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2df7ec578caae783992339f37ba90042_JaffaCakes118

Files

2df7ec578caae783992339f37ba90042_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3e2039a09d361703ab4c8a2365faf68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
LoadLibraryA
GetLastError
VirtualAlloc
TlsFree
VirtualLock
Sleep
GetModuleHandleA
CloseHandle
VirtualFree
GetProcAddress
TerminateThread
VirtualProtect
FindClose
GetProcessHeap
ResetEvent
GetCurrentThread
GetLocaleInfoA
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
LCMapStringW
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
GetSystemInfo

user32

LoadIconA
ShowWindow
LoadBitmapA
GetDesktopWindow
InSendMessage
UpdateWindow

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dbg
Size: 4KB - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relc
Size: 4KB - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b3e2039a09d361703ab4c8a2365faf68

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 184KB - Virtual size: 215KB

.dbg Size: 4KB - Virtual size: 512B

.relc Size: 4KB - Virtual size: 512B

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 184KB - Virtual size: 215KB

.dbg
Size: 4KB - Virtual size: 512B

.relc
Size: 4KB - Virtual size: 512B