bf9eaac7da684e2c61abf8277fd32f9a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bf9eaac7da684e2c61abf8277fd32f9a_JaffaCakes118
Size

147KB
MD5

bf9eaac7da684e2c61abf8277fd32f9a
SHA1

da3c24c4f7aaf6cd73d3ae9c7162bfe150a5d8ad
SHA256

cdf5751c800cdc940b7a95dfa5e0eab5647afa434834f8d1cbdad583a2f10252
SHA512

69fc6986acfc74f30b9d5ee247b73575d31ee1cf5ec0c5104c08edde5fb9d692b73c5326500ab56367d3a68cacd0c8c3b4047996a9067a25b8db2441a003150b
SSDEEP

3072:v4Xbvxdsn4Dz10m0W3BGTSol+f4jTqsCE0wZZZHVWvMd8:v4Xbvxd6w10m0sc6qKEXZw0d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf9eaac7da684e2c61abf8277fd32f9a_JaffaCakes118

Files

bf9eaac7da684e2c61abf8277fd32f9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6068d34a612ad649501e4f67c2c1b8a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
SystemTimeToFileTime
GetCurrentProcess
RemoveDirectoryW
GetTimeZoneInformation
GetExitCodeProcess
SetFilePointer
SetEnvironmentVariableW
RtlUnwind
ReadConsoleA
TlsAlloc
SetEnvironmentVariableA
GetFullPathNameW
GetStartupInfoA
GetDiskFreeSpaceA
GetStdHandle
SetStdHandle
IsBadCodePtr
CreateDirectoryA
RaiseException
QueryPerformanceCounter
GetCommandLineA
LeaveCriticalSection
SetLocalTime
InitializeCriticalSection
GetDriveTypeW
GetModuleFileNameW
SetFileAttributesA
GetEnvironmentStrings
GetUserDefaultLCID
IsBadWritePtr
GetCurrentThread
RemoveDirectoryA
SetConsoleMode
CreateDirectoryW
FindNextFileA
GetFileType
SetEndOfFile
GetLocalTime
DeleteFileA
CloseHandle
FindFirstFileA
PeekConsoleInputA
GetSystemDefaultLangID
FlushFileBuffers
GetLogicalDrives
GetModuleHandleA
SetFileAttributesW
Beep
IsValidCodePage
WaitForSingleObject
FileTimeToLocalFileTime
GetProcAddress
ReadFile
GetLastError
FindNextFileW
SetCurrentDirectoryW
GetFileAttributesW
FindFirstFileW
GetFullPathNameA
DuplicateHandle
GetFileAttributesA
CreateThread
GetNumberOfConsoleInputEvents
LoadLibraryW
SetConsoleCtrlHandler
ReadConsoleInputA
GetCPInfo
CreateFileW
GetCurrentDirectoryW
GetVersion
TlsGetValue
SetCurrentDirectoryA
GetSystemDefaultLCID
GetACP
TlsSetValue
EnterCriticalSection
SetUnhandledExceptionFilter
CreatePipe
FreeLibrary
GetFileInformationByHandle
UnlockFile
SetFileTime
FileTimeToSystemTime
LockFile
MultiByteToWideChar
GetConsoleMode
CreateFileA
GetDriveTypeA
GetModuleFileNameA
DeleteCriticalSection
ResumeThread
LocalFileTimeToFileTime
FindClose
WriteConsoleA
VirtualFree
WriteFile

user32

MessageBoxA

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6068d34a612ad649501e4f67c2c1b8a0

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 83KB - Virtual size: 82KB

.idata Size: 25KB - Virtual size: 25KB

.idata Size: 14KB - Virtual size: 19KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 83KB - Virtual size: 82KB

.idata
Size: 25KB - Virtual size: 25KB

.idata
Size: 14KB - Virtual size: 19KB

.rsrc
Size: 23KB - Virtual size: 23KB