53a12ded5de49d121f1e527a015e9c15_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

53a12ded5de49d121f1e527a015e9c15_JaffaCakes118
Size

127KB
MD5

53a12ded5de49d121f1e527a015e9c15
SHA1

bb685b603ea7f24010ed86700662cfd7d2c0702a
SHA256

b7e3f7c655917642e6ef88369fe53dd086eadd6086152b15860c3558c2324677
SHA512

69df167a3635ccbd39b83a9589bd2317235eb0c97d452bb4155019503a980c3da0a552abad0c89bea5ff6874be12857fa9af90f8221ac3f1f499d8d2eaabc2ca
SSDEEP

3072:tG6u9O5dAh/oweQSkmAnKb7bJcsxeQ2e2Tp3ybarpkiIsD:i9WAhpsZvfxeQ23Tp3yb2pfZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53a12ded5de49d121f1e527a015e9c15_JaffaCakes118

Files

53a12ded5de49d121f1e527a015e9c15_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9c6e5bc82c6c274ea11072694ac31ca0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
SetConsoleTitleA
RtlUnwind
GetSystemTime
LocalFree
DeleteCriticalSection
SetFilePointer
CloseHandle
VirtualFree
GetFileSize
GetStdHandle
MultiByteToWideChar
GetModuleHandleA
VirtualAlloc
GetCPInfoExA
WideCharToMultiByte
GetLastError
InitializeCriticalSection
RaiseException
FlushFileBuffers
CreateFileA
LocalAlloc
GetFileType
ExitProcess
TlsGetValue
TlsSetValue
SetEndOfFile
EnterCriticalSection
LeaveCriticalSection
ReadFile
GetCommandLineA
DeleteFileA
ReadFile
GetSystemInfo
VirtualFree
VirtualAlloc
FindResourceA
SetFilePointer
SetErrorMode
GetEnvironmentVariableA
SetEndOfFile
GetSystemDefaultLCID
CloseHandle
SetLastError
GetProcAddress
GetFileSize
GetCurrentProcess
GetFullPathNameA
VirtualProtect
CreateProcessA
GetCommandLineA
LockResource
GetACP
InterlockedExchange
GetModuleHandleA
VirtualQuery
GetFileAttributesA
GetUserDefaultLangID
SizeofResource
WriteFile
GetLocaleInfoA
GetExitCodeProcess
GetWindowsDirectoryA
GetVersionExA
Sleep
RemoveDirectoryA
CreateFileA
FormatMessageA
LoadResource
GetModuleFileNameA
GetLastError
LoadLibraryA
CreateDirectoryA
IsDBCSLeadByte

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

oleaut32

VariantCopyInd
SysStringLen
VariantChangeTypeEx
SysAllocStringLen
VariantClear

user32

CharPrevA
ExitWindowsEx
PeekMessageA
MsgWaitForMultipleObjects
CreateWindowExA
SetWindowLongA
LoadStringA
MessageBoxA
TranslateMessage
DestroyWindow
DispatchMessageA
CallWindowProcA

advapi32

RegOpenKeyExA
LookupPrivilegeValueA
RegCloseKey
OpenProcessToken
RegQueryValueExA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text1
Size: 108KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c6e5bc82c6c274ea11072694ac31ca0

Headers

File Characteristics

Imports

kernel32

version

oleaut32

user32

advapi32

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 3KB

.text1 Size: 108KB - Virtual size: 123KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 3KB

.text1
Size: 108KB - Virtual size: 123KB