3ec9aa04f8a1c942a0c0aebf048bfe90_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3ec9aa04f8a1c942a0c0aebf048bfe90_JaffaCakes118
Size

176KB
MD5

3ec9aa04f8a1c942a0c0aebf048bfe90
SHA1

3eb89d8a34b1562783a8122d9f63dc17fd819ff5
SHA256

9122a9048932b236b5f67ec3607b9147eb8affe500923688d0bf0ad486a5cc74
SHA512

c8b4dae6cc3127a4cdff08375eef933be00117cdd3cd75d726ca150c871d4e28299b507e0196a7045cc09c8125fe4d8ff793b1413cb641a174fc682891f025e2
SSDEEP

3072:xdZM3Vzg2gh0GoBq26Q2qmEHsT1WGNZyd+o4pd96QyFH+7RYbMnt0Ujge:xdZMlzg2gafN/mWAyGpZW8gUs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ec9aa04f8a1c942a0c0aebf048bfe90_JaffaCakes118

Files

3ec9aa04f8a1c942a0c0aebf048bfe90_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e63d7857ad1dc21ce03075eee6d74730

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetCommandLineW
GetTickCount
GetProcessPriorityBoost
GetStdHandle
GetModuleHandleA
GetCommandLineA
VirtualAlloc
IsDebuggerPresent
GetVersionExA
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
OutputDebugStringA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryExA
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapReAlloc
RtlUnwind
UnhandledExceptionFilter
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
TerminateProcess
GetLocaleInfoW
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
CompareStringA
CompareStringW
SetEnvironmentVariableA

crypt32

CertVerifyTimeValidity

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e63d7857ad1dc21ce03075eee6d74730

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

crypt32

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 103KB - Virtual size: 192KB

.rsrc Size: 1024B - Virtual size: 552B

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 103KB - Virtual size: 192KB

.rsrc
Size: 1024B - Virtual size: 552B