23944151aeccbf9ddc4bcd620bffc571_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

23944151aeccbf9ddc4bcd620bffc571_JaffaCakes118
Size

261KB
MD5

23944151aeccbf9ddc4bcd620bffc571
SHA1

09ec5f79fa4a7da28a671aa89a26665e6e8ff991
SHA256

1f5c8bef69b72c5b4534c6801964c5751da0fa3cdf4266efaa8c9351a80ed505
SHA512

7cd5cf3be02ad19bf0f6925ee1f41cb480f4c48224ba183512cd0fc2803dfd433aca5784a8cf429656ac167c3245cd59601c3e4a335b55c18ce32e03209ff72e
SSDEEP

6144:8sMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:8DPSZrEtPU4Nmn08r2QnjR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23944151aeccbf9ddc4bcd620bffc571_JaffaCakes118

Files

23944151aeccbf9ddc4bcd620bffc571_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e1c4792f15b09efa9287ef89fc4944a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
SystemTimeToFileTime
GetSystemTime
GetLastError
GetLocaleInfoW
GetVersion
InitializeCriticalSection
ExitProcess
GetCurrentProcess
GetCurrentThreadId
TlsAlloc
GetCurrentThread
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
IsBadWritePtr
FatalAppExitA
GetStartupInfoA
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
Sleep
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
GetUserDefaultLCID
BeginUpdateResourceW
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHCreateDirectoryExA
SHGetFolderPathA

msasn1

ASN1BEREncCheck
ASN1CEREncMultibyteString
ASN1BERDecBitString2
ASN1BEREncGeneralizedTime
ASN1DecRealloc
ASN1BERDecUTCTime
ASN1BEREncFlush
ASN1BEREncEndOfContents
ASN1BERDecDouble
ASN1BEREncChar32String
ASN1BERDecOctetString
ASN1BEREncOpenType
ASN1_CloseModule
ASN1ztchar32string_free
ASN1open_free
ASN1_Encode
ASN1_CloseDecoder

t2embed

TTIsEmbeddingEnabledForFacename

Sections

CODE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sQvasT
Size: 5KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ZY
Size: 2KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sHJUwl
Size: 4KB - Virtual size: 971KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 90KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WoXhXU
Size: 512B - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LqTVGi
Size: 1KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 129KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FOAu
Size: 4KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e1c4792f15b09efa9287ef89fc4944a

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

msasn1

t2embed

Sections

CODE Size: 2KB - Virtual size: 2KB

.sQvasT Size: 5KB - Virtual size: 48KB

.text Size: 11KB - Virtual size: 10KB

.ZY Size: 2KB - Virtual size: 313KB

.rdata Size: 2KB - Virtual size: 46KB

.sHJUwl Size: 4KB - Virtual size: 971KB

.edata Size: 90KB - Virtual size: 130KB

.WoXhXU Size: 512B - Virtual size: 94KB

.data Size: 6KB - Virtual size: 268KB

.LqTVGi Size: 1KB - Virtual size: 188KB

.edata Size: 129KB - Virtual size: 156KB

.FOAu Size: 4KB - Virtual size: 268KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 2KB - Virtual size: 2KB

.sQvasT
Size: 5KB - Virtual size: 48KB

.text
Size: 11KB - Virtual size: 10KB

.ZY
Size: 2KB - Virtual size: 313KB

.rdata
Size: 2KB - Virtual size: 46KB

.sHJUwl
Size: 4KB - Virtual size: 971KB

.edata
Size: 90KB - Virtual size: 130KB

.WoXhXU
Size: 512B - Virtual size: 94KB

.data
Size: 6KB - Virtual size: 268KB

.LqTVGi
Size: 1KB - Virtual size: 188KB

.edata
Size: 129KB - Virtual size: 156KB

.FOAu
Size: 4KB - Virtual size: 268KB

.rsrc
Size: 1KB - Virtual size: 1KB