JaffaCakes118_be657f3e6d92ff2f725ffb71e0a6f57f

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_be657f3e6d92ff2f725ffb71e0a6f57f
Size

302KB
MD5

be657f3e6d92ff2f725ffb71e0a6f57f
SHA1

4cfab5ecaa5acd7aab2703b328563240d87ef232
SHA256

e3448724310df2c2bf6576af2ab8bb0bfcc5dd74b55f6c67fc3469d1c1892bc0
SHA512

8a92d70edb9318c637ba17803320f53bc0ccf5b260eb4792732b4c6824c141b668c2d57f45e602eb28b6b1d884097fa73b068f8ec087e2fbab396b3c4844439b
SSDEEP

6144:Qr7beYd6upMOOsrLJffxOD3pZSVrdoTeJsVkbE9ucqe7fWJGflTvuLE:Qr7yFf0LJffxOD5ZSRdoTeq59ufe7fWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_be657f3e6d92ff2f725ffb71e0a6f57f

Files

JaffaCakes118_be657f3e6d92ff2f725ffb71e0a6f57f
.exe windows:5 windows x86 arch:x86

3c82a3e3d902843c8be455bba2a0507b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
ReadFile
VirtualFree
QueryDosDeviceA
GetFileSize
DeviceIoControl
FindNextFileA
VirtualAlloc
GetFullPathNameA
WriteFile
CloseHandle
RtlUnwind
CreateEventA
GetTimeZoneInformation
FreeLibrary
DuplicateHandle
GetLogicalDrives
ResetEvent
GetCurrentThreadId
OutputDebugStringA
DeleteFileA
FlushFileBuffers
WideCharToMultiByte
CreateFileA
CreateThread
IsBadCodePtr
GetSystemTime
WaitForSingleObject
SystemTimeToFileTime
EnterCriticalSection
FindClose
SetFilePointer
GetFileTime
DeleteCriticalSection
LeaveCriticalSection
FindFirstFileA
GetSystemTimeAsFileTime
GetModuleHandleA
UnhandledExceptionFilter
FileTimeToSystemTime
CreateMutexA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

ole32

CoInitialize
CoUninitialize

user32

GetUserObjectInformationA
MessageBoxA
GetProcessWindowStation

msvcrt

_XcptFilter
malloc
fopen
_snprintf
swprintf
fflush
wcsncpy
_purecall
__CxxFrameHandler
printf
localtime
rand
strncmp
_errno
ctime
fseek
toupper
wcsstr
memmove
free
strncpy
strstr
time
fprintf
_CxxThrowException
_splitpath
memcpy
vsprintf
_initterm
ftell
fread
_wcsicmp
fclose
_strupr
_stricmp
srand
_amsg_exit
calloc
sprintf
memset

esent

JetCreateIndex
JetDelete
JetOpenFileSectionInstance
JetOpenTempTable
JetCreateIndex2
JetAddColumn
JetOSSnapshotFreeze
JetEnableMultiInstance
JetOpenFile
JetDeleteColumn2
JetDBUtilities
JetBeginTransaction
JetGetSecondaryIndexBookmark
JetOpenTempTable3
JetRestore
JetRestoreInstance
JetExternalRestore2
JetSetCurrentIndex
JetGetTableIndexInfo
JetMakeKey
JetDetachDatabase
JetStopServiceInstance

iprtprio

GetPriorityInfo
SetPriorityInfo

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c82a3e3d902843c8be455bba2a0507b

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

user32

msvcrt

esent

iprtprio

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 275KB - Virtual size: 461KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 275KB - Virtual size: 461KB

.rsrc
Size: 3KB - Virtual size: 2KB