21ac8a5a4e1da8a146e17a93dea7b611_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

21ac8a5a4e1da8a146e17a93dea7b611_JaffaCakes118
Size

680KB
MD5

21ac8a5a4e1da8a146e17a93dea7b611
SHA1

4a338f05b32be40875943e45b1195a108766513b
SHA256

c149e7b888c99b74dbefb7d9055c3081bf3a8a04bbfe74309f6ca1c4f728375e
SHA512

1a3ecc6da276087fac5e800cdbdc9d1027bff2661c2b8c5d14950d4ef21055926e4004f7fa673bc9a9ab171746f34ff041162a36ddd86edfe3c19f3f754df3f3
SSDEEP

6144:gbVYe/s6P6p75KMiHcejBV9zbHeO6E7RLf+msR+zjBsmQ8KMk3K8xy:g+ehCp7viHZesRbZBsMUDxy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21ac8a5a4e1da8a146e17a93dea7b611_JaffaCakes118

Files

21ac8a5a4e1da8a146e17a93dea7b611_JaffaCakes118
.dll windows:4 windows x86 arch:x86

84b5b770c9f238bdb2590c646c04c24c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
_adjust_fdiv
_setjmp3
malloc
exit
longjmp
free
sprintf

kernel32

LoadLibraryA
LocalAlloc
Sleep
GetProcAddress
DisableThreadLibraryCalls
FreeLibrary
GetCommandLineA
GetModuleHandleA
GetLastError
InterlockedExchange
LocalFree

user32

MessageBoxA
CharUpperA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

BCREGFORM
BCREGMAIN
BCRegMain
BCWIZBYE
BCWIZPAGEREG
BCWIZPAYM
BCWIZREVU
BCWIZSUPP
BCWIZUSER
BCWIZWELCOME
BCWizBye
BCWizPageReg
BCWizPayM
BCWizRevu
BCWizSupp
BCWizUser
BCWizWelcome
BSIO
ESDSFH
EXTFHSUB
FHREDIR
FHR_CLOSE
MAPPER
MFFH
MFINI
PRINTFORM
STRIPE_CLOSE_FILE
STRIPE_CONFIG_INFO
STRIPE_COPY_FILE
STRIPE_CREATE_FILE
STRIPE_DELETE_FILE
STRIPE_FLUSH_FILE
STRIPE_FREE_RECORD_LOCK
STRIPE_GET_RECORD_LOCK
STRIPE_INITIALIZE
STRIPE_LOCKFILE
STRIPE_OPEN_FILE
STRIPE_READ_FILE
STRIPE_RELSEMA
STRIPE_RENAME_FILE
STRIPE_SEEK_END
STRIPE_SETSEMA
STRIPE_TEST_RECORD_LOCK
STRIPE_UNLFILE
STRIPE_UNLOCK
STRIPE_WRITE_FILE
XFH_CLOSE_MAPPER
XFH_CLOSE_MVS
XFH_FUNC
_mFdllinfo

Sections

.text
Size: 392KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84b5b770c9f238bdb2590c646c04c24c

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 392KB - Virtual size: 388KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 130KB

Size: 4KB - Virtual size: 3KB

.rsrc Size: 216KB - Virtual size: 214KB

.reloc Size: 52KB - Virtual size: 48KB

.text
Size: 392KB - Virtual size: 388KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 130KB

.rsrc
Size: 216KB - Virtual size: 214KB

.reloc
Size: 52KB - Virtual size: 48KB