2e3170d83128e764c14d623407ada730_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e3170d83128e764c14d623407ada730_JaffaCakes118
Size

112KB
MD5

2e3170d83128e764c14d623407ada730
SHA1

a59c78bab77667a97676125f246538cd955a883e
SHA256

a3aa6d038004d39583f9d53c2df829e8ceef3f1a18223324c52e7bd42e019b0a
SHA512

9e09a8821142dc603509bd4e20dacc75876a6946201a991777762f8ccd67e574c0bb906d741bfaede4ecaa8684b3460e32ec9eb99a0b890864b3bd441d9f6814
SSDEEP

1536:N4Tn4We4LRQOQtiUCjJcl6UcZzYqanIFYx5vZG90Ltnb//VfZb0ymHhBrAsLRhQe:N4T41pwJU6UcWnI8Y0J9fZIy4heg0A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e3170d83128e764c14d623407ada730_JaffaCakes118

Files

2e3170d83128e764c14d623407ada730_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7fa6843fba7a11641a9778ad5d7dd7dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

IsAccelerator
CoTaskMemRealloc
OleSaveToStream
OleUninitialize
CoResumeClassObjects
OleCreateLinkToFileEx
CoRegisterMessageFilter
OleLoad

gdi32

MoveToEx
BitBlt
CloseMetaFile
CreateDCA
AddFontResourceA
CreateBitmapIndirect
BeginPath
TextOutA
EndPath
Ellipse
LineTo
SelectClipPath

kernel32

HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW
TlsAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
LoadLibraryW
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
IsProcessorFeaturePresent

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fa6843fba7a11641a9778ad5d7dd7dd

Headers

DLL Characteristics

File Characteristics

Imports

ole32

gdi32

kernel32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 6KB - Virtual size: 14KB

.tls Size: 512B - Virtual size: 17B

.rsrc Size: 86KB - Virtual size: 85KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 6KB - Virtual size: 14KB

.tls
Size: 512B - Virtual size: 17B

.rsrc
Size: 86KB - Virtual size: 85KB

.reloc
Size: 3KB - Virtual size: 3KB