JaffaCakes118_895cc284825810712eb7a85b28533cca

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_895cc284825810712eb7a85b28533cca
Size

392KB
MD5

895cc284825810712eb7a85b28533cca
SHA1

48e818ba3f6002a4f1ef086b561df40dea4f2b78
SHA256

0d162cd950a2dd847ba0def915e1b77e71fcb42ee7ccfc1c442d8c9c59856c86
SHA512

c20050ac01816304b3efede26b63af5087608755275cad06becbd2ff26330bccafe95678f8ad9dfcec268482ad5ff33f55a4294fae44898d0f867387eb40135d
SSDEEP

12288:7dxeU2Gq3B1OArDJOTC2qaKG46r47LUL3LvBeFt:7G3B1Hr8TKaB4k47LUnvBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_895cc284825810712eb7a85b28533cca

Files

JaffaCakes118_895cc284825810712eb7a85b28533cca
.exe windows:5 windows x86 arch:x86

6ef1f50023789fd990aee966bf86fdf5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
WaitForSingleObject
GetTickCount
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateThread
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
RtlUnwind
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ef1f50023789fd990aee966bf86fdf5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 265KB - Virtual size: 265KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 265KB - Virtual size: 265KB

.reloc
Size: 5KB - Virtual size: 5KB