JaffaCakes118_cf045d707469b315b0b3db3df9d7d0330ed350798cd0b8c872f0083b722ad6ea

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_cf045d707469b315b0b3db3df9d7d0330ed350798cd0b8c872f0083b722ad6ea
Size

186KB
MD5

7242c1f824846fc4a1d08a58409f6632
SHA1

54a94c696ff8cd0622b170a4fd1c7bd5cef53256
SHA256

cf045d707469b315b0b3db3df9d7d0330ed350798cd0b8c872f0083b722ad6ea
SHA512

c608b4f43eaa23022411883af23c31fde5cebe2eaa1d5c75f2d048416e62eb706a1784de66637cbb11adab7278e01bc33a04e87e688cdfc5810adc7513db76b6
SSDEEP

3072:Zi2GpaKuv5eK0jRxGOyu+3j6otEnHpgdNS2N7RIYdeezAAat6u7brSMHaAiYa:Zi2pKuRvGd+vtGJgdRwezAF6u7/zaEa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/699f50563800eaf90fa9a22645004ad5c92ae62a0de9fd13545b44f564596b2a

Files

JaffaCakes118_cf045d707469b315b0b3db3df9d7d0330ed350798cd0b8c872f0083b722ad6ea
.zip
699f50563800eaf90fa9a22645004ad5c92ae62a0de9fd13545b44f564596b2a
.exe windows:5 windows x86 arch:x86

2a3abe3f2c2c4342ffe3930eed2d0e9b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\salopapehasawi\tiluludutiya-kipijevinegosu36\nuzucigo-bija.pdb

Imports

kernel32

FoldStringW
SetWaitableTimer
WaitNamedPipeA
CommConfigDialogW
SetSystemTimeAdjustment
SearchPathA
EnumResourceTypesA
GetCPInfoExA
EnumResourceTypesW
GetModuleFileNameA
WriteConsoleOutputCharacterW
GetConsoleAliasesLengthA
DeleteFileA
LocalAlloc
GetProcAddress
GetModuleHandleW
LoadLibraryW
AddRefActCtx
GetConsoleAliasW
FindFirstChangeNotificationA
GlobalAddAtomA
WritePrivateProfileStringW
EnumResourceNamesA
lstrcpynA
AddAtomA
GetConsoleAliasesLengthW
FreeConsole
SetPriorityClass
_lclose
SetCommMask
GetConsoleTitleW
CreateDirectoryExA
FillConsoleOutputCharacterW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent

advapi32

BackupEventLogW
CloseEventLog
DeregisterEventSource
GetNumberOfEventLogRecords
GetEventLogInformation

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 191KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a3abe3f2c2c4342ffe3930eed2d0e9b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 191KB - Virtual size: 564KB

.rsrc Size: 21KB - Virtual size: 21KB

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 191KB - Virtual size: 564KB

.rsrc
Size: 21KB - Virtual size: 21KB