fec5a0d4dea87955c124f2eaa1f759f5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fec5a0d4dea87955c124f2eaa1f759f5_JaffaCakes118
Size

837KB
MD5

fec5a0d4dea87955c124f2eaa1f759f5
SHA1

ea2e50e16448ac8131391e5322663660ef0a5632
SHA256

4f3220da017e7be3e0b168a958134aae6dc96458cb12118e849465e2af752629
SHA512

2d52122e66c2239dff9186c3d91c036ba5a3ab3645bcdaba58157c5e2712b0b15131eee44b6760bfb45506f2f7155202c3cca141585c20e1f1333ddba07038b9
SSDEEP

24576:ghZnfY/dbcSq8cluurLKjgHKOKWOGNpBpK:wfYFwt1fKjgHKYdpBp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fec5a0d4dea87955c124f2eaa1f759f5_JaffaCakes118

Files

fec5a0d4dea87955c124f2eaa1f759f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7635dcecd406ff50deaf716ee2564cac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

imm32

ImmReleaseContext
ImmSetCompositionFontW
ImmGetContext
ImmSetCompositionWindow
ImmNotifyIME
ImmGetCompositionStringW

kernel32

TlsAlloc
RemoveDirectoryW
SetSystemTimeAdjustment
GetWindowsDirectoryW
TlsGetValue
SetEvent
VirtualProtect
GlobalAlloc
GlobalFree
SetUnhandledExceptionFilter
LoadLibraryW
GetCurrentProcess
CreatePipe
GetLocaleInfoW
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
SetFileAttributesA
GetLastError
GetFileAttributesA
CloseHandle
HeapFree
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetFileType
CreateFileA
GetTimeZoneInformation
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleA
GetProcAddress
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
ReadFile
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7635dcecd406ff50deaf716ee2564cac

Headers

File Characteristics

Imports

advapi32

imm32

kernel32

Sections

.text Size: 515KB - Virtual size: 515KB

.rdata Size: 240KB - Virtual size: 239KB

.data Size: 79KB - Virtual size: 114KB

.rsrc Size: 1024B - Virtual size: 968B

.text
Size: 515KB - Virtual size: 515KB

.rdata
Size: 240KB - Virtual size: 239KB

.data
Size: 79KB - Virtual size: 114KB

.rsrc
Size: 1024B - Virtual size: 968B