JaffaCakes118_b2a82dc29eb9a1bddc5c6b95952df837

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_b2a82dc29eb9a1bddc5c6b95952df837
Size

253KB
MD5

b2a82dc29eb9a1bddc5c6b95952df837
SHA1

a8b41a94a499e6ab5e46dd5d0ea733b215ad1b1a
SHA256

18cd87a6ddcee06130577972a98dab1fc59bf3a083477f71c2c7cf540429b630
SHA512

80dffcb6bc986e79b357ab8d4fac2e957fd9afefc55a39dea6a98bba694b5e64e9d7dbdf2defc9ea978bc8a2363fa721f82f1339e139006e0bbdf334f614bcb1
SSDEEP

6144:D84mP2TOXLCy6AvmbQlp7y+Pnkww7fhtD:Q4u2TO7Cy6ClpLRwThtD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b2a82dc29eb9a1bddc5c6b95952df837

Files

JaffaCakes118_b2a82dc29eb9a1bddc5c6b95952df837
.exe windows:4 windows x86 arch:x86

a0c050139de18ef48715811f21a603c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

FreeLibrary
GetLastError
GetModuleHandleA
GetProcessHeap
LoadLibraryA
CreateMutexW
GetProcAddress

mapistub

MAPIInitialize
BMAPISendMail
MAPIUninitialize
OpenStreamOnFile
BMAPIDetails
cmc_look_up
FixMAPI
MAPIDetails
cmc_free
PRProviderInit
cmc_send_documents
MAPILogoff
BMAPISaveMail
MAPISendMail
BMAPIGetAddress

browseui

DllGetVersion

Sections

CODE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 75KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 135KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0c050139de18ef48715811f21a603c1

Headers

File Characteristics

Imports

advapi32

kernel32

mapistub

browseui

Sections

CODE Size: 6KB - Virtual size: 6KB

.edata Size: 1KB - Virtual size: 224KB

.edata Size: 1024B - Virtual size: 167KB

.text Size: 18KB - Virtual size: 20KB

.rdata Size: 1024B - Virtual size: 4KB

.edata Size: 1024B - Virtual size: 77KB

.edata Size: 75KB - Virtual size: 124KB

.data Size: 7KB - Virtual size: 72KB

.edata Size: 135KB - Virtual size: 203KB

.rsrc Size: 5KB - Virtual size: 4KB

CODE
Size: 6KB - Virtual size: 6KB

.edata
Size: 1KB - Virtual size: 224KB

.edata
Size: 1024B - Virtual size: 167KB

.text
Size: 18KB - Virtual size: 20KB

.rdata
Size: 1024B - Virtual size: 4KB

.edata
Size: 1024B - Virtual size: 77KB

.edata
Size: 75KB - Virtual size: 124KB

.data
Size: 7KB - Virtual size: 72KB

.edata
Size: 135KB - Virtual size: 203KB

.rsrc
Size: 5KB - Virtual size: 4KB