56de42b913ff94f4e0d9c33a3199eb0a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

56de42b913ff94f4e0d9c33a3199eb0a_JaffaCakes118
Size

96KB
MD5

56de42b913ff94f4e0d9c33a3199eb0a
SHA1

ce1b01ee48c30d5a2bf3c37968bdce69aaf36775
SHA256

ccb88759ea4c18fccb30fa0ba3c4ff6ed6b4a43998713de2da36c9e470ba5a69
SHA512

608550a50385836fe22470eb1f4c5a99756671a7f1fcb33a1e49c6381331e5f2b9c5f015fab27f88183ab1267354a55f578e1932b9098e5f873a46c95fa9b9cc
SSDEEP

1536:I3tZgTywgZfo0QZgzJAtdUiOOBvX+PJqECBOMdLvE5Yfcb:Uvwb/0VzJsdUg/qqhw5qfcb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56de42b913ff94f4e0d9c33a3199eb0a_JaffaCakes118

Files

56de42b913ff94f4e0d9c33a3199eb0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a893fc1a28c5edfb0e4beb2fc33cfde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

javac2.pdb

Imports

kernel32

TlsGetValue
GetModuleFileNameA
FileTimeToLocalFileTime
TlsAlloc
GetSystemTimeAsFileTime
GetDriveTypeA
GetLocaleInfoA
HeapAlloc
TerminateProcess
GetStringTypeA
FreeLibrary
UnhandledExceptionFilter
QueryPerformanceCounter
SetEndOfFile
GetTimeZoneInformation
CompareStringA
WideCharToMultiByte
SetFilePointer
GetFileType
CompareStringW
GetTickCount
SetHandleCount
WriteFile
LCMapStringA
FreeEnvironmentStringsA
GetCurrentThreadId
VirtualFree
GetCurrentDirectoryA
DeleteCriticalSection
ReadFile
CreateFileA
GetEnvironmentStrings
FormatMessageA
GetExitCodeProcess
FileTimeToSystemTime
GetLastError
CloseHandle
FindClose
RtlUnwind
TlsFree
GetCurrentProcess
GetCurrentDirectoryW
LCMapStringW
SetLastError
SetEnvironmentVariableW
LocalFree
SetStdHandle
HeapDestroy
LoadLibraryA
GetFileAttributesA
GetACP
LeaveCriticalSection
GetSystemInfo
FlushFileBuffers
GetEnvironmentStringsW
ExitProcess
FreeEnvironmentStringsW
GetStringTypeW
EnterCriticalSection
HeapCreate
ExitThread
GetModuleHandleA
GetProcAddress
QueryPerformanceFrequency
HeapSize
InitializeCriticalSection
MultiByteToWideChar
WaitForSingleObject
GetCPInfo
HeapReAlloc
GetVersionExA
TlsSetValue
GetStartupInfoA
GetStdHandle
HeapFree
InterlockedExchange
FindNextFileA
SetEnvironmentVariableA
IsValidLanguageGroup
FreeConsole
GetOEMCP
GetExitCodeThread
FindFirstFileA
GetCommandLineA
CreateProcessA

advapi32

RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fdata
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a893fc1a28c5edfb0e4beb2fc33cfde

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 76KB - Virtual size: 72KB

.data Size: 4KB - Virtual size: 1.0MB

fdata Size: 4KB - Virtual size: 640B

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 76KB - Virtual size: 72KB

.data
Size: 4KB - Virtual size: 1.0MB

fdata
Size: 4KB - Virtual size: 640B

.rsrc
Size: 8KB - Virtual size: 4KB