JaffaCakes118_2c0ffb764598d50420971c79417335f5

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_2c0ffb764598d50420971c79417335f5
Size

255KB
MD5

2c0ffb764598d50420971c79417335f5
SHA1

d393cf822fba386ba777d62ddf19406d1c178226
SHA256

502c273ef783f23d146d760bbefd89821bbc72d2fe241e98331c99c215d4ccd4
SHA512

9970cd7d7baef0646d0a7818634d7b5497330a18ed49d920d7f2e3a952051b1852ac6572fca3355863a6af09d5192936c5c2074ce45d8b0d7b41b0b70fd4e1ee
SSDEEP

6144:S+JhAlQFFiZ2q4TLTOZGEFTJjWdftk+R:S+JhZc2R/TcbjW7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_2c0ffb764598d50420971c79417335f5

Files

JaffaCakes118_2c0ffb764598d50420971c79417335f5
.exe windows:4 windows x86 arch:x86

78469751e762dbf4d377c1be7b601842

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetLastInputInfo
SystemParametersInfoW

ntdll

NtPowerInformation

kernel32

LocalAlloc
HeapFree
LockResource
ProcessIdToSessionId
CloseHandle
lstrlenW
GetFileSize
GetSystemTimeAsFileTime
CreateFileW
FindResourceW
GetSystemPowerStatus
LocalFileTimeToFileTime
DeleteCriticalSection
LoadResource
GetProcessHeap
SystemTimeToFileTime
FindClose
ReadFile
WaitForMultipleObjects
HeapSize
GetSystemInfo
DeviceIoControl
FindFirstFileW
GetCurrentThreadId
IsDebuggerPresent
WaitForSingleObject
UnhandledExceptionFilter
RaiseException
FindNextFileW
FindResourceExW
HeapDestroy
FreeLibrary
OutputDebugStringW
EnterCriticalSection
SetUnhandledExceptionFilter
SetThreadExecutionState
LeaveCriticalSection
FileTimeToSystemTime
LocalFree
GetLocalTime
HeapReAlloc
HeapAlloc
OpenProcess
SizeofResource
LoadLibraryExW
GetStartupInfoA
VirtualAlloc

iassvcs

IASUninitialize
IASSetMaxNumberOfThreads
DllRegisterServer
IASRequestThread

psbase

SPGetSubtypeInfo

Sections

.KYJeWIE
Size: 512B - Virtual size: 9KB

IMAGE_SCN_MEM_READ

.RNhFGXg
Size: 1024B - Virtual size: 25KB

IMAGE_SCN_MEM_READ

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.KGoSZFy
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cATCB
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HVPaQ
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xcgtxCh
Size: 1024B - Virtual size: 642B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ErYc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ICaagqK
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SHjaf
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CWMmo
Size: 512B - Virtual size: 359B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RblP
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

78469751e762dbf4d377c1be7b601842

Headers

DLL Characteristics

File Characteristics

Imports

user32

ntdll

kernel32

iassvcs

psbase

Sections

.KYJeWIE Size: 512B - Virtual size: 9KB

.RNhFGXg Size: 1024B - Virtual size: 25KB

.text Size: 18KB - Virtual size: 17KB

.KGoSZFy Size: 1024B - Virtual size: 920B

.cATCB Size: 3KB - Virtual size: 2KB

.HVPaQ Size: 2KB - Virtual size: 1KB

.xcgtxCh Size: 1024B - Virtual size: 642B

.ErYc Size: 3KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 108KB

.ICaagqK Size: 2KB - Virtual size: 1KB

.rdata Size: 207KB - Virtual size: 206KB

.SHjaf Size: 2KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 3KB

.CWMmo Size: 512B - Virtual size: 359B

.RblP Size: 1024B - Virtual size: 976B

.KYJeWIE
Size: 512B - Virtual size: 9KB

.RNhFGXg
Size: 1024B - Virtual size: 25KB

.text
Size: 18KB - Virtual size: 17KB

.KGoSZFy
Size: 1024B - Virtual size: 920B

.cATCB
Size: 3KB - Virtual size: 2KB

.HVPaQ
Size: 2KB - Virtual size: 1KB

.xcgtxCh
Size: 1024B - Virtual size: 642B

.ErYc
Size: 3KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 108KB

.ICaagqK
Size: 2KB - Virtual size: 1KB

.rdata
Size: 207KB - Virtual size: 206KB

.SHjaf
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 3KB

.CWMmo
Size: 512B - Virtual size: 359B

.RblP
Size: 1024B - Virtual size: 976B