JaffaCakes118_9eec15032a9c0ac9900636ece584555e1035f7da569cfe620cb26d2e5c76b114

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_9eec15032a9c0ac9900636ece584555e1035f7da569cfe620cb26d2e5c76b114
Size

660KB
MD5

9c21d85b34579a39f06b4820e27ed06a
SHA1

c7c9bfa334ae316a52337f291972e56f40ef7edc
SHA256

9eec15032a9c0ac9900636ece584555e1035f7da569cfe620cb26d2e5c76b114
SHA512

cbee7253098e3a7e73b770afa77161bc15b9849528b1eb08632b3eaca489cd53a0d66c23b8ea334104b738f776e3542c5fad7bd4bea4b99e1b965cbe82b6dc24
SSDEEP

12288:hgGBIVTYhF3ms3TJgJb0w3nxZJaQT5yeFxIFKPfyVnuKawUqyzd+EpVIQ6:xwTQF3msjK3ncy5umfqu4S8EpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bd1789026d6010f1849075e14a07f168349ac7e9bbe154358a0e96f0435e8d9a

Files

JaffaCakes118_9eec15032a9c0ac9900636ece584555e1035f7da569cfe620cb26d2e5c76b114
.zip
bd1789026d6010f1849075e14a07f168349ac7e9bbe154358a0e96f0435e8d9a
.exe windows:5 windows x86 arch:x86

159a2e4ccc84f2a04642d12fcf53e4a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\boxujisegomaya29\reserazewu47\yagabihi75\tawadisibi-tuzat.pdb

Imports

kernel32

GetConsoleAliasesA
GetConsoleTitleA
GlobalAlloc
LoadLibraryW
GetProcessHandleCount
InterlockedPopEntrySList
LeaveCriticalSection
WriteConsoleW
GetMailslotInfo
GetModuleFileNameW
GetVolumePathNameA
GetShortPathNameA
GetStdHandle
FillConsoleOutputCharacterW
GetLongPathNameW
SetLastError
LocalFlags
SetCalendarInfoW
MoveFileA
WriteProfileSectionW
SetConsoleWindowInfo
GetConsoleTitleW
VirtualProtect
GetFileAttributesExW
GetCPInfoExA
GetFileInformationByHandle
CreateFileW
HeapSize
WriteConsoleOutputCharacterA
GetConsoleAliasesLengthW
LoadLibraryA
FreeResource
FlushFileBuffers
GetCommandLineW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
EnterCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
RaiseException
RtlUnwind
SetStdHandle
MultiByteToWideChar
LCMapStringW
GetStringTypeW
HeapReAlloc
CloseHandle

user32

ClientToScreen

gdi32

GetTextExtentExPointA

advapi32

IsTokenRestricted
ClearEventLogA

ole32

OleInitialize

Sections

.text
Size: 705KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

159a2e4ccc84f2a04642d12fcf53e4a9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 705KB - Virtual size: 704KB

.data Size: 25KB - Virtual size: 289KB

.rsrc Size: 54KB - Virtual size: 53KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 705KB - Virtual size: 704KB

.data
Size: 25KB - Virtual size: 289KB

.rsrc
Size: 54KB - Virtual size: 53KB

.reloc
Size: 8KB - Virtual size: 7KB