6aa0801db426aceb10e26d6c2a562e24_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6aa0801db426aceb10e26d6c2a562e24_JaffaCakes118
Size

92KB
MD5

6aa0801db426aceb10e26d6c2a562e24
SHA1

222e369308b64428dcb31e79a95233086dbcde8f
SHA256

95c9f45876c5930a78df1666538516fd3d6d36f3c53b6eb5b255185a442ae978
SHA512

9cfb98a6aa58c25ed75821fe6517537a8eacc05f05e5c32a2223fd2e3b327cd6b7d04daea13b24db5c1708c2d6ca3a83501eaf16549e374f179d4c3c01feaf23
SSDEEP

1536:tHWygif+fGvYj9a8qcWX/4BEdLoFftMrJeFvQAR+LESqzFHCfqb:tsifmGvYUhrcuFeZzRMN8Cfqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6aa0801db426aceb10e26d6c2a562e24_JaffaCakes118

Files

6aa0801db426aceb10e26d6c2a562e24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a893fc1a28c5edfb0e4beb2fc33cfde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

javac2.pdb

Imports

kernel32

TlsGetValue
GetModuleFileNameA
FileTimeToLocalFileTime
TlsAlloc
GetSystemTimeAsFileTime
GetDriveTypeA
GetLocaleInfoA
HeapAlloc
TerminateProcess
GetStringTypeA
FreeLibrary
UnhandledExceptionFilter
QueryPerformanceCounter
SetEndOfFile
GetTimeZoneInformation
CompareStringA
WideCharToMultiByte
SetFilePointer
GetFileType
CompareStringW
GetTickCount
SetHandleCount
WriteFile
LCMapStringA
FreeEnvironmentStringsA
GetCurrentThreadId
VirtualFree
GetCurrentDirectoryA
DeleteCriticalSection
ReadFile
CreateFileA
GetEnvironmentStrings
FormatMessageA
GetExitCodeProcess
FileTimeToSystemTime
GetLastError
CloseHandle
FindClose
RtlUnwind
TlsFree
GetCurrentProcess
GetCurrentDirectoryW
LCMapStringW
SetLastError
SetEnvironmentVariableW
LocalFree
SetStdHandle
HeapDestroy
LoadLibraryA
GetFileAttributesA
GetACP
LeaveCriticalSection
GetSystemInfo
FlushFileBuffers
GetEnvironmentStringsW
ExitProcess
FreeEnvironmentStringsW
GetStringTypeW
EnterCriticalSection
HeapCreate
ExitThread
GetModuleHandleA
GetProcAddress
QueryPerformanceFrequency
HeapSize
InitializeCriticalSection
MultiByteToWideChar
WaitForSingleObject
GetCPInfo
HeapReAlloc
GetVersionExA
TlsSetValue
GetStartupInfoA
GetStdHandle
HeapFree
InterlockedExchange
FindNextFileA
SetEnvironmentVariableA
IsValidLanguageGroup
FreeConsole
GetOEMCP
GetExitCodeThread
FindFirstFileA
GetCommandLineA
CreateProcessA

advapi32

RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fdata
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a893fc1a28c5edfb0e4beb2fc33cfde

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 72KB - Virtual size: 68KB

.data Size: 4KB - Virtual size: 1.0MB

fdata Size: 4KB - Virtual size: 640B

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 72KB - Virtual size: 68KB

.data
Size: 4KB - Virtual size: 1.0MB

fdata
Size: 4KB - Virtual size: 640B

.rsrc
Size: 8KB - Virtual size: 4KB