29ef3560830c4e6f420773af3b356a4c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

29ef3560830c4e6f420773af3b356a4c_JaffaCakes118
Size

97KB
MD5

29ef3560830c4e6f420773af3b356a4c
SHA1

68735a0d05b8873cfd7e3165c6751880131e2a64
SHA256

0c79f0a9184a13565d73179eece33fbbcf88a81755b14cb39ca19de9d88ae226
SHA512

2d5eda6fbd9f58e1981c2eb27ee5069edbbb24fa723f356925b636bafeed5c799ed059bb45e71314a58e98b9f917431c49cb05c59c3b633545300a9cdde2ff58
SSDEEP

1536:lNCwtpBAj8XWmmsx4mHwNr6Vp5/qMRg0D4V4MN+S6wRicyCFqH6NRtCvAG+A9vTT:r7ij8XWmmAvHRAeMV4yRmKFqaA9veDW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29ef3560830c4e6f420773af3b356a4c_JaffaCakes118

Files

29ef3560830c4e6f420773af3b356a4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a08022c9d9902ca103962a740eb4842

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameW
GetProcAddress
GetPrivateProfileStringW
DeleteCriticalSection
GetFullPathNameW
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
FreeLibrary
InitializeCriticalSection

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

msvcp60

??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??0runtime_error@std@@QAE@ABV01@@Z
??1runtime_error@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

shlwapi

PathRemoveFileSpecW

msvcrt

_controlfp
__CxxFrameHandler
wcslen
wcscat
_waccess
_wcsicmp
wcsrchr
wcsncpy
??2@YAPAXI@Z
_CxxThrowException
??0exception@@QAE@ABV0@@Z
strlen
wprintf
free
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a08022c9d9902ca103962a740eb4842

Headers

File Characteristics

Imports

kernel32

advapi32

msvcp60

shlwapi

msvcrt

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 72KB - Virtual size: 72KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 72KB - Virtual size: 72KB