38830146abcbc79964e977bbf44907d2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

38830146abcbc79964e977bbf44907d2_JaffaCakes118
Size

281KB
MD5

38830146abcbc79964e977bbf44907d2
SHA1

71efccdcfadbbf8ad0e0fd0257f093a2817314be
SHA256

22556fc14fcb4c18f584c0a89bb17c6ca9837d0f179fe08591529ebe00cb66c3
SHA512

2c05814ea87290870d8fecf73c54cbc27b366cf5d3b3045175873f3f8322d2161f7077135037eeb6c7452e90fe75bd3944dff59784d7a3e77664307720268d1c
SSDEEP

3072:RAtcWdqpgdKqCAKI+nezHJ0BUCGeY8PrydnRIXuBI8vXNp5bioHF4058GHw:O+/gdLCAtf0B1GBO9RcpBBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38830146abcbc79964e977bbf44907d2_JaffaCakes118

Files

38830146abcbc79964e977bbf44907d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fab86d279a9304f0c2c688ee210c27e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareStringA
CompareStringW
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FindResourceA
FindResourceExA
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetCommandLineA
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadLocale
GetThreadPriority
GetUserDefaultLCID
GetVersionExA
GetWindowsDirectoryA
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
ReadConsoleInputA
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
ScrollConsoleScreenBufferA
SetConsoleCursorPosition
SetConsoleOutputCP
SetEndOfFile
SetEvent
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterA
WriteFile

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen

user32

CharLowerA
CharLowerBuffA
CharLowerBuffW
CharUpperA
CharUpperBuffA
CharUpperBuffW
GetSystemMetrics
MessageBeep
MessageBoxA
SetActiveWindow

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 1024B - Virtual size: 608B

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

4fab86d279a9304f0c2c688ee210c27e

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Sections

.text Size: 141KB - Virtual size: 141KB

.data Size: 27KB - Virtual size: 26KB

.bss Size: - Virtual size: 17KB

.CRT Size: 512B - Virtual size: 4B

.idata Size: 3KB - Virtual size: 2KB

.stab Size: 1KB - Virtual size: 1KB

.stabstr Size: 1024B - Virtual size: 608B

.text
Size: 141KB - Virtual size: 141KB

.data
Size: 27KB - Virtual size: 26KB

.bss
Size: - Virtual size: 17KB

.CRT
Size: 512B - Virtual size: 4B

.idata
Size: 3KB - Virtual size: 2KB

.stab
Size: 1KB - Virtual size: 1KB

.stabstr
Size: 1024B - Virtual size: 608B