3f724b35c5ea5c5bafdde16935ea74f1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f724b35c5ea5c5bafdde16935ea74f1_JaffaCakes118
Size

236KB
MD5

3f724b35c5ea5c5bafdde16935ea74f1
SHA1

d3b116e2cb41b4d16dc31b979606b60dc849e388
SHA256

893ba331c55f562ed802369362d5bdb4ae09a4b084162d67fb69546fb393ae0a
SHA512

a620a6524d96afb3038c6e8ccdf756ae510be775802fc2871bd56813a1b90a474efc1a34015d89123eb7b5d8d671b777edb2e2719ea456bfaf5673fc9709a5c7
SSDEEP

3072:G+tGSQJMJYPf/MOm7UDKMeLePzLdTyWhXLwxgWCH49E3xIhmmm+SnfNWBYtFEg9G:iJMJYPfS7UWKPzhT3hegWCYimiG4wCPU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f724b35c5ea5c5bafdde16935ea74f1_JaffaCakes118

Files

3f724b35c5ea5c5bafdde16935ea74f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0369ef9ca7f408401dc16aeaaca2ea61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoRegisterSurrogate
CoRegisterClassObject
OleUninitialize
OleInitialize

ws2_32

WSACloseEvent
WSAConnect
WSAAddressToStringA
WSACreateEvent

odbc32

ord4
ord140
ord154
ord155
ord156
ord58
ord59
ord37
ord138
ord139
ord173
ord74
ord75

kernel32

RaiseException
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
LCMapStringW
LCMapStringA
SetEndOfFile
SetConsoleCtrlHandler
GetProcAddress
GetOEMCP
GetACP
CreateFileA
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
SetTapePosition
lstrcpyA
GetEnvironmentVariableA
CreateProcessA
GetCurrentThreadId
RemoveDirectoryA
GetCurrentProcess
LoadLibraryA
CreateDirectoryA
CopyFileA
ResetEvent
VirtualFree
VirtualAlloc
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
FatalAppExitA
TerminateProcess
HeapReAlloc
HeapAlloc
HeapSize
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
CloseHandle
ReadFile
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
WriteFile
FlushFileBuffers
IsBadWritePtr
SetUnhandledExceptionFilter

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 630KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0369ef9ca7f408401dc16aeaaca2ea61

Headers

File Characteristics

Imports

ole32

ws2_32

odbc32

kernel32

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 76KB - Virtual size: 630KB

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 76KB - Virtual size: 630KB