JaffaCakes118_8e74506e125212bbe614ac23e5872a95

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_8e74506e125212bbe614ac23e5872a95
Size

253KB
MD5

8e74506e125212bbe614ac23e5872a95
SHA1

dd1b0636ca24a704d1a7d6ef09a8ca5c1b32ef35
SHA256

2c7e5df605b5ab0ef24cbf09c2b3bc6438b9f2d7f3644c3d04ead2a4518772b5
SHA512

1de26b118c41fa2dc5aacb8e94b2ea77c5a8bae8cd62ad65c0d8a4dc896bb14f4172d546ff0279cfdff4b3bb7633279730781a3e8fc9b71064b28ac10e84f893
SSDEEP

6144:j84mP2TOXLCy6AvmbQlp7y+Pnkww7fhtD:w4u2TO7Cy6ClpLRwThtD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_8e74506e125212bbe614ac23e5872a95

Files

JaffaCakes118_8e74506e125212bbe614ac23e5872a95
.exe windows:4 windows x86 arch:x86

a0c050139de18ef48715811f21a603c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

FreeLibrary
GetLastError
GetModuleHandleA
GetProcessHeap
LoadLibraryA
CreateMutexW
GetProcAddress

mapistub

MAPIInitialize
BMAPISendMail
MAPIUninitialize
OpenStreamOnFile
BMAPIDetails
cmc_look_up
FixMAPI
MAPIDetails
cmc_free
PRProviderInit
cmc_send_documents
MAPILogoff
BMAPISaveMail
MAPISendMail
BMAPIGetAddress

browseui

DllGetVersion

Sections

CODE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 75KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 135KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0c050139de18ef48715811f21a603c1

Headers

File Characteristics

Imports

advapi32

kernel32

mapistub

browseui

Sections

CODE Size: 6KB - Virtual size: 6KB

.edata Size: 1KB - Virtual size: 224KB

.edata Size: 1024B - Virtual size: 167KB

.text Size: 18KB - Virtual size: 20KB

.rdata Size: 1024B - Virtual size: 4KB

.edata Size: 1024B - Virtual size: 77KB

.edata Size: 75KB - Virtual size: 124KB

.data Size: 7KB - Virtual size: 72KB

.edata Size: 135KB - Virtual size: 203KB

.rsrc Size: 5KB - Virtual size: 4KB

CODE
Size: 6KB - Virtual size: 6KB

.edata
Size: 1KB - Virtual size: 224KB

.edata
Size: 1024B - Virtual size: 167KB

.text
Size: 18KB - Virtual size: 20KB

.rdata
Size: 1024B - Virtual size: 4KB

.edata
Size: 1024B - Virtual size: 77KB

.edata
Size: 75KB - Virtual size: 124KB

.data
Size: 7KB - Virtual size: 72KB

.edata
Size: 135KB - Virtual size: 203KB

.rsrc
Size: 5KB - Virtual size: 4KB