3b7e7b45d504fc050a3e6454570b7efd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b7e7b45d504fc050a3e6454570b7efd_JaffaCakes118
Size

289KB
MD5

3b7e7b45d504fc050a3e6454570b7efd
SHA1

dc39059482da5ee09876d604f261ce5c39c5068e
SHA256

ba54e138dded8fb61f6a0c9fad379afa102e5fdb0935c2e693c6a8ed1a67037c
SHA512

a26abbe04cb7faf5348b2bc3a2d995b069cf64e2496eaaad72a8d2af2b98d15e965a64acf3ff0643c4dc95ded30579414afbc33a6bf034ae2953610991827a08
SSDEEP

6144:Uz5X72QlgynEsKfanPoIAdhRSbGqgSbGqnSbGqMy:Uz5XSQ3oyP1AdhRS6SVS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b7e7b45d504fc050a3e6454570b7efd_JaffaCakes118

Files

3b7e7b45d504fc050a3e6454570b7efd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4de3ba5e4c79b0aca2a59583ac1c702b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
CreateDirectoryW
CreateFileW
CreateProcessW
DeleteAtom
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
ExpandEnvironmentStringsW
FindAtomW
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FlushInstructionCache
FormatMessageW
FreeLibrary
GetAtomNameW
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesW
GetFileSize
GetFileTime
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
CloseHandle
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MulDiv
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
SetCurrentDirectoryW
SetLastError
SetProcessWorkingSetSize
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualFree
VirtualProtect
VirtualQuery
WriteFile
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
AddAtomW
VirtualAlloc
GlobalLock
GetDriveTypeA

user32

LoadIconA
LoadCursorA
GetSystemMetrics
LoadIconW

gdi32

GetStockObject

advapi32

RegOpenKeyExW

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4de3ba5e4c79b0aca2a59583ac1c702b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 6KB - Virtual size: 5KB

.text3 Size: 182KB - Virtual size: 181KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 94KB - Virtual size: 94KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.text3
Size: 182KB - Virtual size: 181KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 94KB - Virtual size: 94KB

.reloc
Size: 1KB - Virtual size: 1KB