4097fb47e0aea99722c5b2aa75ce91c6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4097fb47e0aea99722c5b2aa75ce91c6_JaffaCakes118
Size

114KB
MD5

4097fb47e0aea99722c5b2aa75ce91c6
SHA1

ed77f553d819c318284b2ee820ba67591e89da6d
SHA256

90cb7ec22280e443d474155a2346c197053727112925c206642db657b4eab1b8
SHA512

4e09c598132d2d5fc50381f182b808d5113dc99af6d309df1246ce3fc7163c7dd45b3ea4c414e09c0c45cc0f2ad7f52bdd2ef37a06d504dda5bd7c406943561a
SSDEEP

1536:Coyexe0QoZbPCxejSXttHxYTNBFSXPmeyLmv97tzAbCjygREXkq3X/pHS3b8H:zDvHlPCxeQHcSeTyF942CXHvpy3wH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4097fb47e0aea99722c5b2aa75ce91c6_JaffaCakes118

Files

4097fb47e0aea99722c5b2aa75ce91c6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

930bd9a7e591f0c21241271489994f1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetLocaleInfoW
LoadResource
FindResourceA
SetEnvironmentVariableA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
HeapAlloc
FatalAppExitA
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleHandleA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringA
CompareStringW
GetLocalTime
WriteFile
GetTempPathA
GetTempFileNameA
CreateFileA
OpenFileMappingA
MapViewOfFile
WaitForMultipleObjects
OpenEventA
WaitForSingleObject
SetEvent
ResetEvent
ReleaseMutex
UnmapViewOfFile
IsBadWritePtr
GetModuleFileNameA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
IsBadReadPtr
GetWindowsDirectoryA
GetVersion
CreateProcessA
GetVersionExA
OpenMutexA
Sleep
CloseHandle
OutputDebugStringA
DisableThreadLibraryCalls

user32

FindWindowA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Exports

Exports

QrUeXYuiw

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

930bd9a7e591f0c21241271489994f1e

Headers

File Characteristics

Imports

kernel32

user32

version

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.data Size: 96KB - Virtual size: 416KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 13KB

.data
Size: 96KB - Virtual size: 416KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 2KB - Virtual size: 1KB