e7424875db640e533eb8114086302cd9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e7424875db640e533eb8114086302cd9_JaffaCakes118
Size

54KB
MD5

e7424875db640e533eb8114086302cd9
SHA1

9dbfd3c8305a485128d37c7d52a9f1c0473c90cc
SHA256

786ecc4b982a61173c693df18a8e1f710d0a3faef92e9777451fd0460636b78a
SHA512

f29beb53ecfaea308c4690edf47046ed7fd4dc3c3d3e64308b27ed728a968e95527ee4118ebd9ac7b9cfd7bc084298a75aa522cf61ca687b640802ad8d591593
SSDEEP

768:enZoQsqZFzd9nYzuruCFVShpK/Q08DtxnvaSAUe4vYOGRgc:enuQswFzdmCXShpK40knvaSAyYHgc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7424875db640e533eb8114086302cd9_JaffaCakes118

Files

e7424875db640e533eb8114086302cd9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f9341299f76d45d1dffca733179d1c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetFilePointer
ReadFile
SetEndOfFile
SetStdHandle
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetLastError
CreateMutexA
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
TerminateProcess
GetModuleFileNameA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
GetCurrentProcessId
CreateFileA
GetFileType
GetCurrentProcess
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
GetCurrentDirectoryA
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
DeleteFileA
GetTempPathA
GetCommandLineA
GetVersion
GetFileAttributesA
HeapFree
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
VirtualAlloc
CloseHandle
ExitProcess
HeapDestroy
HeapCreate
VirtualFree

user32

CreatePopupMenu
CreateWindowExA
RegisterClassA
UnregisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
WinHelpA
PostMessageA
SetTimer
DefWindowProcA
KillTimer
MessageBoxA
PostQuitMessage
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
AppendMenuA
InsertMenuA
TrackPopupMenu
LoadIconA
LoadStringA
IsWindow
DestroyMenu
LoadMenuA
GetSubMenu
RemoveMenu

advapi32

RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

shell32

Shell_NotifyIconA
ShellExecuteA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f9341299f76d45d1dffca733179d1c2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 2KB - Virtual size: 2KB