bce7e4cfa9a078f50cfde463149e5695_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bce7e4cfa9a078f50cfde463149e5695_JaffaCakes118
Size

225KB
MD5

bce7e4cfa9a078f50cfde463149e5695
SHA1

523ba95e18b45b4de729205416a8a840f5c04a30
SHA256

fd8e2a796cdacde9d9db4f21d1a7582af52bb202d28dca6f8fe10e8f49d2fa58
SHA512

57ffe8346f56cb61c80ad52e011ba9254a59dbcb3f2fd5bedb28478624bf41907c2e79320d224c90f920a1ac3895a94953e54531890102b2d517322295c13310
SSDEEP

3072:hGvtF7cz+y0qhAosOt5C+vqZh29kuuLA/1bR05O5bTFeR/nYLKNa88Ti/J6:hGvttgdPsOtPvqWkuMm1baOaxonTi/J6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bce7e4cfa9a078f50cfde463149e5695_JaffaCakes118

Files

bce7e4cfa9a078f50cfde463149e5695_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a3ab77386732982b146040439d949e7f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
GetMailslotInfo
lstrlenW
TlsGetValue
GetModuleFileNameW
WriteProfileSectionA
GetTempPathA
SetDefaultCommConfigA
FindVolumeMountPointClose
IsDBCSLeadByte
DosDateTimeToFileTime
CreateConsoleScreenBuffer
GetConsoleCP
GetConsoleOutputCP
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetStringTypeW
OutputDebugStringW
LocalFileTimeToFileTime
SetCommBreak
SetFileShortNameW
FlushFileBuffers
GetThreadContext
VirtualProtect
GetNumberOfConsoleMouseButtons
LocalAlloc
HeapReAlloc
GetCPInfo
GetOEMCP
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineW
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
SetLastError
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetModuleHandleW
IsDebuggerPresent
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
CreateFileW

user32

SetDlgItemInt
LoadAcceleratorsW
RemovePropW
GetPropA
AppendMenuA
HiliteMenuItem

gdi32

PolyDraw
ResetDCW
TranslateCharsetInfo
GetGlyphOutlineA
CreateICW
AddFontResourceW
SetICMProfileA

ole32

OleSave
CoIsOle1Class

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3ab77386732982b146040439d949e7f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 6KB - Virtual size: 7.1MB

.rsrc Size: 132KB - Virtual size: 132KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 6KB - Virtual size: 7.1MB

.rsrc
Size: 132KB - Virtual size: 132KB

.reloc
Size: 5KB - Virtual size: 4KB