16d13a0c205790d450f6b3be364358ea_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

16d13a0c205790d450f6b3be364358ea_JaffaCakes118
Size

91KB
MD5

16d13a0c205790d450f6b3be364358ea
SHA1

5bc7a76bafc1249b4d30ec7e36829e178d829b41
SHA256

0898cc3b769097d46c2f7b628d224b28e2d15118798608b37969df950d1c7846
SHA512

c52dfef28585450f8a371125c32fd264f18280ce1bfee1dbbd611c3144d8e9859baa7a614cf323201cacda03104ab4f7037536285ca3267f3927060d17bbb898
SSDEEP

1536:sC//JoioC/LaX+8tVx+GQxP3cBFuAQhw8j7KrVp+os7yyLxUwU/XpMc:7JoioV3nxny3cqAON7KrVp+os7yKxU7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16d13a0c205790d450f6b3be364358ea_JaffaCakes118

Files

16d13a0c205790d450f6b3be364358ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d45326e275d9d2b1cd896db6207728e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

lz32

LZCopy
LZOpenFileA
LZClose

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetGetConnectedState

kernel32

IsBadReadPtr
SetUnhandledExceptionFilter
SetStdHandle
GetEnvironmentStringsW
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
Sleep
IsBadCodePtr
FindClose
FindNextFileA
FindFirstFileA
CopyFileA
GetEnvironmentStrings
FreeEnvironmentStringsW
CompareStringA
GetCPInfo
CompareStringW
GetACP
GetOEMCP
SetEndOfFile
GetStringTypeA
GetStringTypeW
FormatMessageA
TerminateProcess
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
LCMapStringW
HeapFree
HeapAlloc
RtlUnwind
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
ExitProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
CreateDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
CloseHandle
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
WriteFile
WideCharToMultiByte
CreateFileA
GetCurrentProcessId
FlushFileBuffers
MultiByteToWideChar
LCMapStringA

user32

GetDC

gdi32

GetDeviceCaps

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

ole32

CoCreateGuid

Sections

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d45326e275d9d2b1cd896db6207728e

Headers

File Characteristics

Imports

version

lz32

wininet

kernel32

user32

gdi32

advapi32

ole32

Sections

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 69KB - Virtual size: 75KB

.rsrc Size: 1024B - Virtual size: 912B

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 69KB - Virtual size: 75KB

.rsrc
Size: 1024B - Virtual size: 912B