3f40bff1de1a38c4e8914c73a42206ef_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f40bff1de1a38c4e8914c73a42206ef_JaffaCakes118
Size

36KB
MD5

3f40bff1de1a38c4e8914c73a42206ef
SHA1

ef99ca71ed4db1037d256f5147faa781cab49f25
SHA256

fb9c4248028191bb00e774a8db41b4bb83b08a3e6646cb360b80c257a791a538
SHA512

abb970630a47814227548f28d680c020c2529824a02a94586e334083cad88dbd9945189381d929b9cb9e6013579820e98c9be8aef150be5c9d551cc47916a04a
SSDEEP

768:zC5Su9S1SumsST2wkUj2OxL4gee4geijp3L31h:zC5SQS1SNT3kUjN4gee4geij/h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f40bff1de1a38c4e8914c73a42206ef_JaffaCakes118

Files

3f40bff1de1a38c4e8914c73a42206ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fd7c12ab3f445d38d54dbdf13a4808b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
DeleteFileA
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushInstructionCache
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDirectoryA
GetThreadPriority
GetThreadSelectorEntry
GetTickCount
GetUserDefaultLCID
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MoveFileA
MulDiv
MultiByteToWideChar
OpenProcess
RaiseException
ReadFile
RtlUnwind
SearchPathA
SetConsoleCtrlHandler
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetPriorityClass
SetThreadLocale
SetThreadPriority
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerLanguageNameA
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrlenW

user32

KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
MapDialogRect
MapVirtualKeyA
MessageBoxA
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
RedrawWindow
RegisterClassA
ReleaseCapture
ReleaseDC
RemoveMenu

advapi32

RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fd7c12ab3f445d38d54dbdf13a4808b

Headers

File Characteristics

Imports

version

kernel32

user32

advapi32

Sections

.text Size: 2KB - Virtual size: 4KB

.rdata Size: 18KB - Virtual size: 20KB

.rsrc Size: 15KB - Virtual size: 16KB

.text
Size: 2KB - Virtual size: 4KB

.rdata
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 15KB - Virtual size: 16KB