e9cd494b249cea7b968fa89f1e7d40de_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e9cd494b249cea7b968fa89f1e7d40de_JaffaCakes118
Size

726KB
MD5

e9cd494b249cea7b968fa89f1e7d40de
SHA1

fd514fe256f815cfecf67fb57e16d106443d90dc
SHA256

76487462acfa06bc90bda7d72bee7f88ea2e70d838a50d9012362958ad93f02a
SHA512

2689268a8fd96fa0e9b65f245bb3ab4ca860e7aa017e930c14d58bbe0ffc52ecb050de43865ebd8b7ff56270075d4a071caed81dff3c4d01c482d183482ff53a
SSDEEP

12288:xBnDWIk+GOifTjyBImx5MKJ5nJDLWrutVPIEwSdbE0HD1s:x5Vk+vibuIm8qZJfWyPwENdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9cd494b249cea7b968fa89f1e7d40de_JaffaCakes118

Files

e9cd494b249cea7b968fa89f1e7d40de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45d5af0a54bdb03f33a9ff8e60c2afa6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Flat\Happen\Position\tall\Slow\Art\forless.pdb

Imports

kernel32

SetFilePointer
CreateDirectoryW
PrepareTape
VirtualFree
GetFileSize
ResetEvent
GetProcessHeap
DeleteCriticalSection
SetSystemPowerState
GetVolumeInformationW
VirtualAlloc
FileTimeToSystemTime
GetSystemTimeAsFileTime
ReadFile
CloseHandle
CreateFileW
GetLogicalDriveStringsW
GetCPInfo
VirtualProtect
GetVersion
CreateEventW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetVersionExA
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA

Sections

.text
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45d5af0a54bdb03f33a9ff8e60c2afa6

Headers

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 400KB - Virtual size: 400KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 9KB - Virtual size: 62KB

.rsrc Size: 290KB - Virtual size: 290KB

.text
Size: 400KB - Virtual size: 400KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 9KB - Virtual size: 62KB

.rsrc
Size: 290KB - Virtual size: 290KB