a7bce79b0bfe09cc6ecc2df1a2026180_JaffaCakes118

General

Target

a7bce79b0bfe09cc6ecc2df1a2026180_JaffaCakes118
Size

981KB
MD5

a7bce79b0bfe09cc6ecc2df1a2026180
SHA1

858145e51aa5e3da1444afd00412b2f2fb0ea3cf
SHA256

3773a0cfa35a2b5b8d3e041e79c54b9b125ef3e26ac703c7dc9e73a42c208b77
SHA512

542434cdd935f09b586189122127e81ebdf17da66c8a42232e4e0569f1e56918b77a410d5f3c3ce490fcba4349280f9fc9fbf4359ec8be3e74e15d2f73c25f39
SSDEEP

12288:7EiJCY4jhCXQaoHM8Vfpr2/WAnB94t1ekQ9GY8ncVVhTQuYoTwLiQjIgsH5cyo2T:vJC4HTk+GYmuTQOuiQ0gsZM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7bce79b0bfe09cc6ecc2df1a2026180_JaffaCakes118

Files

a7bce79b0bfe09cc6ecc2df1a2026180_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c18b7fdd21854c7c6899721675bb2d07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter

advapi32

RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegEnumKeyExW

ole32

ReleaseStgMedium
PropVariantClear
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoGetMalloc
CreateStreamOnHGlobal

kernel32

VirtualAlloc
GetProcAddress
DeleteCriticalSection
WaitForMultipleObjects
HeapReAlloc
GetSystemTimeAsFileTime
CreateMutexW
GetModuleHandleW
GetStartupInfoW
HeapFree
ExitProcess
FreeEnvironmentStringsW
GetFileType
GetLastError

shell32

SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHBindToParent
SHPathPrepareForWriteW
SHGetMalloc
SHGetFileInfoW
DragQueryFileW
ShellAboutW
SHCreateDirectoryExW

wintrust

CryptCATAdminCalcHashFromFileHandle

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 677KB - Virtual size: 7.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2dc47
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c18b7fdd21854c7c6899721675bb2d07

Headers

File Characteristics

Imports

msvcrt

advapi32

ole32

kernel32

shell32

wintrust

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 677KB - Virtual size: 7.6MB

.2dc47 Size: 226KB - Virtual size: 226KB

.rsrc Size: 27KB - Virtual size: 28KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 677KB - Virtual size: 7.6MB

.2dc47
Size: 226KB - Virtual size: 226KB

.rsrc
Size: 27KB - Virtual size: 28KB