fe89c78363b1068a148b4089845405e7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fe89c78363b1068a148b4089845405e7_JaffaCakes118
Size

148KB
MD5

fe89c78363b1068a148b4089845405e7
SHA1

649a2869ceb79151e13dca9b523f5e7310f4e3d8
SHA256

7c530623f92ec7bad70c5f143aa59506a90dd7ce445af07964ca51de1bf7472d
SHA512

827e2b8be6b53f3975b30c8df653cdc4a697781ab1dfeab26af39e1ca57a85c152028616187d408863c0c300a1ad8b332d7c86db8a674d88461ae3af800f41b7
SSDEEP

3072:nIIeCo1Wg3QEKM+zj7oaRfD1RmocDHEV/Lfefa:Ze9WQ/KP/7ouD1YHQj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe89c78363b1068a148b4089845405e7_JaffaCakes118

Files

fe89c78363b1068a148b4089845405e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d91b0bd980e0dd564173c4571e283d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
GetExitCodeProcess
FlushFileBuffers
LocalFileTimeToFileTime
IsBadWritePtr
LeaveCriticalSection
FindNextFileA
ResumeThread
DuplicateHandle
FreeLibrary
GetFileAttributesW
SetEnvironmentVariableW
GetFullPathNameA
GetLastError
VirtualFree
LockFile
GetSystemDefaultLCID
GetStdHandle
SetEnvironmentVariableA
FindFirstFileA
FileTimeToLocalFileTime
GetUserDefaultLCID
GetFullPathNameW
GetACP
TlsSetValue
GetCurrentDirectoryA
RaiseException
GetTimeZoneInformation
CreateFileA
ReadFile
SetConsoleMode
GetCPInfo
SetCurrentDirectoryW
WriteFile
GetModuleFileNameA
GetCurrentProcess
SetConsoleCtrlHandler
GetProcAddress
GetVersion
ReadConsoleA
InitializeCriticalSection
IsValidCodePage
CreateThread
GetFileAttributesA
SetFilePointer
PeekConsoleInputA
GetCurrentThread
FileTimeToSystemTime
CreateDirectoryW
GetLocalTime
SetEndOfFile
GetModuleHandleA
GetCurrentDirectoryW
SetFileTime
GetCommandLineA
GetFileType
IsBadCodePtr
SetStdHandle
GetDiskFreeSpaceA
GetEnvironmentStrings
GetLogicalDrives
SystemTimeToFileTime
MultiByteToWideChar
TlsAlloc
GetConsoleMode
LoadLibraryW
SetFileAttributesA
GetStartupInfoA
QueryPerformanceCounter
FindClose
RtlUnwind
SetUnhandledExceptionFilter
GetModuleFileNameW
WriteConsoleA
GetDriveTypeA
DeleteCriticalSection
CloseHandle
GetFileInformationByHandle
ReadConsoleInputA
FindFirstFileW
CreatePipe
WaitForSingleObject
UnlockFile
SetFileAttributesW
SetCurrentDirectoryA
TlsGetValue
DeleteFileA
CreateFileW
RemoveDirectoryW
FindNextFileW
Beep
GetSystemDefaultLangID
EnterCriticalSection
CreateDirectoryA
GetDriveTypeW
GetNumberOfConsoleInputEvents
SetLocalTime

user32

MessageBoxA

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d91b0bd980e0dd564173c4571e283d5

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 79KB - Virtual size: 78KB

.rdata Size: 33KB - Virtual size: 32KB

.rdata Size: 11KB - Virtual size: 11KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 79KB - Virtual size: 78KB

.rdata
Size: 33KB - Virtual size: 32KB

.rdata
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 23KB - Virtual size: 23KB