20f7c6e93464eb84ed03723fa2a668f0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

20f7c6e93464eb84ed03723fa2a668f0_JaffaCakes118
Size

264KB
MD5

20f7c6e93464eb84ed03723fa2a668f0
SHA1

f20488a63cf4fb7ad34a67de62213ead333c913c
SHA256

bb0e092dd61d3a53ecd00e3526df8ba354ec3f7ba4d42c343808f7bf92d8afb7
SHA512

2be8f58fb1bebba136c31c3b5572894935f7692e773e001a151dd4d5edcd8a773dd89173200e0b8bd9739ed1ad4a59a4ce35e0b7390fb0c047bbd33e6890d474
SSDEEP

6144:rrlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:3oZ8qpUwufw8T6XLNhcwHWntbbK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20f7c6e93464eb84ed03723fa2a668f0_JaffaCakes118

Files

20f7c6e93464eb84ed03723fa2a668f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee238bb9626547eef1d88167d0d6cf8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA

kernel32

CreateMutexA
WaitForSingleObject
GetACP
GetModuleFileNameA
GetFileAttributesA
MultiByteToWideChar
lstrcmpiA
LoadLibraryW
GetProcAddress

advapi32

RegEnumValueA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegSetValueExA

oleaut32

UnRegisterTypeLi
LoadTypeLibEx

iphlpapi

DeleteIpForwardEntry
SetIpStatistics
InternalGetIpNetTable
GetAdaptersInfo
GetFriendlyIfIndex
InternalDeleteIpNetEntry
DeleteIpNetEntry

adsnt

DllGetClassObject

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.blKQTV
Size: 5KB - Virtual size: 911KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 97KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tg
Size: 2KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 120KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WDjuG
Size: 4KB - Virtual size: 729KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee238bb9626547eef1d88167d0d6cf8e

Headers

File Characteristics

Imports

shlwapi

kernel32

advapi32

oleaut32

iphlpapi

adsnt

Sections

.text Size: 16KB - Virtual size: 16KB

.blKQTV Size: 5KB - Virtual size: 911KB

.rdata Size: 1024B - Virtual size: 9KB

.edata Size: 97KB - Virtual size: 182KB

.Tg Size: 2KB - Virtual size: 71KB

.data Size: 6KB - Virtual size: 254KB

.edata Size: 120KB - Virtual size: 216KB

.WDjuG Size: 4KB - Virtual size: 729KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 16KB - Virtual size: 16KB

.blKQTV
Size: 5KB - Virtual size: 911KB

.rdata
Size: 1024B - Virtual size: 9KB

.edata
Size: 97KB - Virtual size: 182KB

.Tg
Size: 2KB - Virtual size: 71KB

.data
Size: 6KB - Virtual size: 254KB

.edata
Size: 120KB - Virtual size: 216KB

.WDjuG
Size: 4KB - Virtual size: 729KB

.rsrc
Size: 10KB - Virtual size: 9KB