42ad9c2911795e8d51bf7badcf0fb9a7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42ad9c2911795e8d51bf7badcf0fb9a7_JaffaCakes118
Size

913KB
MD5

42ad9c2911795e8d51bf7badcf0fb9a7
SHA1

380be2346b9f48cf1c8f4258390bb66473adc127
SHA256

1cf159515ec1aa62750a2bc832feba61abc930376c3e159af5732621d7d03838
SHA512

a00e8fd6729d4dfabe7cc08254855b9dd2051359f892231e40977b683a6878bf6fa79e6e291ada46e27a812807f8ff3ca7da7f9b95effd89532c9ca929f73464
SSDEEP

24576:I4xN+1p4Ka/5yw45V/0wwFELKyKTf+ANeQG+qQG:3Ph/59g/0WLKPK+ql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ad9c2911795e8d51bf7badcf0fb9a7_JaffaCakes118

Files

42ad9c2911795e8d51bf7badcf0fb9a7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

69eb5ad1f48b6c2e908aea909c08fbaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHChangeNotify
ExtractIconExW
SHGetSpecialFolderLocation

secur32

GetUserNameExW
InitializeSecurityContextW

advapi32

RegCloseKey
OpenSCManagerW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW

ole32

PropVariantClear
CreateStreamOnHGlobal

kernel32

FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
DeleteCriticalSection
GlobalAlloc
GlobalFree
VirtualAlloc
HeapSize
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetFileSize
CloseHandle
CreateMutexW
CreateFileMappingW
GetModuleFileNameW
CreateDirectoryW
CreateFileW
LCMapStringW
GetStringTypeW
HeapReAlloc
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
WriteConsoleW
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapAlloc

mpr

WNetGetUniversalNameW
WNetGetLastErrorW
WNetEnumResourceW

userenv

LeaveCriticalPolicySection

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dnc3
Size: 807KB - Virtual size: 810KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

69eb5ad1f48b6c2e908aea909c08fbaa

Headers

File Characteristics

Imports

shell32

secur32

advapi32

ole32

kernel32

mpr

userenv

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 6.7MB

.dnc3 Size: 807KB - Virtual size: 810KB

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 6.7MB

.dnc3
Size: 807KB - Virtual size: 810KB