5679016c28278db7a38a945d91086e3e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5679016c28278db7a38a945d91086e3e_JaffaCakes118
Size

444KB
MD5

5679016c28278db7a38a945d91086e3e
SHA1

3b61306bdbe7d3003aa937a380e092067e49c1e6
SHA256

eaeb1232adcaa28a61aea62ed4c769b84a34261db56165863ccb3e620955deaa
SHA512

d18312394b02c7da675e3303829427afba958b4b3f6f92104527d8dd0c70ab22bf87b503e0a4173e9bf34677f3452b1588abb8a8b1269914610670b5848a5d94
SSDEEP

12288:KQa1SLI9PsfqIYsMEH3C4BEUneItMS86NvmJlx552+21vvpre:9qRzUBEUneT6EJlC5g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5679016c28278db7a38a945d91086e3e_JaffaCakes118

Files

5679016c28278db7a38a945d91086e3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33d12ced7d35384f21b50492d29061ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetDeviceGammaRamp
GetWinMetaFileBits
CreateRectRgnIndirect
CreateScalableFontResourceW
GetCharacterPlacementA
RemoveFontResourceW
GetPixel
GetColorAdjustment
CreateFontW
GetGraphicsMode
GetTextExtentPoint32A

kernel32

GetLocaleInfoA
GetCurrentProcess
GetFileType
SetLastError
VirtualAlloc
GetModuleHandleA
CreateProcessW
WriteFile
UnhandledExceptionFilter
TlsAlloc
RtlUnwind
HeapSize
GetTimeZoneInformation
GetSystemTimeAsFileTime
WideCharToMultiByte
EnumSystemLocalesA
DebugActiveProcess
IsValidLocale
GetUserDefaultLCID
GetLocaleInfoW
HeapDestroy
GetCommandLineA
GetLastError
FreeEnvironmentStringsW
FindFirstFileExA
GetStringTypeW
FreeEnvironmentStringsA
DeleteCriticalSection
MultiByteToWideChar
VirtualFree
InterlockedExchange
LoadLibraryW
LeaveCriticalSection
GetOEMCP
LCMapStringW
GetCurrentThreadId
EnterCriticalSection
GetStdHandle
GlobalSize
GetVersionExA
TransmitCommChar
LCMapStringA
HeapCreate
GetProcAddress
TlsGetValue
GetStringTypeA
GetDateFormatA
ExitProcess
GetTimeFormatA
VirtualProtect
RemoveDirectoryA
SetEnvironmentVariableA
CompareStringW
CreateMutexA
VirtualQuery
GetEnvironmentStringsW
CompareStringA
TerminateProcess
FindResourceExA
IsBadWritePtr
LoadLibraryA
GetSystemInfo
TlsSetValue
GetStartupInfoA
HeapFree
GetCurrentProcessId
InitializeCriticalSection
GetEnvironmentStrings
HeapAlloc
GetACP
TlsFree
SetHandleCount
GetTickCount
GetModuleFileNameA
GetThreadTimes
HeapReAlloc
GetCPInfo
GetCurrentThread
IsValidCodePage
QueryPerformanceCounter

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33d12ced7d35384f21b50492d29061ff

Headers

File Characteristics

Imports

gdi32

kernel32

Sections

.text Size: 107KB - Virtual size: 106KB

.rdata Size: 7KB - Virtual size: 10KB

.data Size: 321KB - Virtual size: 320KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 107KB - Virtual size: 106KB

.rdata
Size: 7KB - Virtual size: 10KB

.data
Size: 321KB - Virtual size: 320KB

.rsrc
Size: 8KB - Virtual size: 8KB