JaffaCakes118_c140ba82a61c4446855a0bc26312ef06bf19c5647623adfde14a1fe4aa86cecd

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_c140ba82a61c4446855a0bc26312ef06bf19c5647623adfde14a1fe4aa86cecd
Size

119KB
MD5

6efdaa6c506b19769858494f8a65446e
SHA1

ac6809b534639802f581414934959df3ae179577
SHA256

c140ba82a61c4446855a0bc26312ef06bf19c5647623adfde14a1fe4aa86cecd
SHA512

8b4860a3a26b6d157d43a7f66002f65c2bfc5444ff5f962e4e4a761270086f860572d3eb69fe77d006ffe5624f07f3dc8033300ff90faef91c4ff65cab549056
SSDEEP

3072:83g/e3BLOFfhY7F3IaRjb4bNCXdk5+CkATmUOXhFn0D7XQaenj5aU:83gkBLOFJgFYQH4NcktBPOXhyXynj5B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6a22706c0bcda16b41b0957b496a1dbfeebfd4ee192bdf0637e067e38e4a562f

Files

JaffaCakes118_c140ba82a61c4446855a0bc26312ef06bf19c5647623adfde14a1fe4aa86cecd
.zip
6a22706c0bcda16b41b0957b496a1dbfeebfd4ee192bdf0637e067e38e4a562f
.exe windows:5 windows x86 arch:x86

44ee62a4400af83b87d8ba40d9bab42b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\cofugijir_38 rixivifucinu65_zetibayafewala\hiluj hihape\jo.pdb

Imports

kernel32

WriteConsoleInputW
SetComputerNameExA
GetStringTypeA
OpenJobObjectA
ReadConsoleA
GetConsoleAliasA
InterlockedDecrement
GetProfileSectionA
EnumCalendarInfoExW
GetConsoleAliasesA
GetConsoleAliasesLengthA
CreateRemoteThread
SetFileTime
FindResourceExA
TerminateThread
GetLocaleInfoW
GetFileAttributesA
GetAtomNameW
GetModuleFileNameW
ReleaseSemaphore
GetLastError
GetProcAddress
GetLongPathNameA
VirtualAlloc
WriteConsoleA
LocalAlloc
DnsHostnameToComputerNameA
GetFileType
HeapLock
GetModuleFileNameA
GetDefaultCommConfigA
SetConsoleTitleW
GetModuleHandleA
GetConsoleTitleW
GetVersionExA
ReadConsoleInputW
ResetWriteWatch
CreateThread
CreateMailslotW
FileTimeToDosDateTime
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
SetHandleCount
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LoadLibraryA
CloseHandle
CreateFileA
SetStdHandle
FlushFileBuffers
HeapSize
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
ReadFile

user32

SetCaretPos

advapi32

AdjustTokenGroups

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44ee62a4400af83b87d8ba40d9bab42b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

Sections

.text Size: 70KB - Virtual size: 69KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 136KB - Virtual size: 160KB

.rsrc Size: 57KB - Virtual size: 56KB

.text
Size: 70KB - Virtual size: 69KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 136KB - Virtual size: 160KB

.rsrc
Size: 57KB - Virtual size: 56KB