35fc57187d443f216db65b14c6187db9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

35fc57187d443f216db65b14c6187db9_JaffaCakes118
Size

105KB
MD5

35fc57187d443f216db65b14c6187db9
SHA1

81b61dee8b8f01cb43b2c509973f4cb08052b482
SHA256

728fde30ddffdd7b2fc75ec1c548a7fe13f023c02b2d0db2e38198d59805c92a
SHA512

77c2f7df86cd9046ac0e3621dd82a89a762c00ce9b84b3d035445176bb99a2770e9bd6d2aadb0da4fa4f6e6d957af2364eb3c8c6152bbd9eb54d12872b145a26
SSDEEP

1536:SNCwtpBM18XWn0Ev1Q63hBf0EPUI57jjVsgXRkj40I09hDk3Io0JyWvzHoumQzkF:a7q8XWn0Ex8IJHO+kF9BLo0tLoW0ODW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35fc57187d443f216db65b14c6187db9_JaffaCakes118

Files

35fc57187d443f216db65b14c6187db9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a08022c9d9902ca103962a740eb4842

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameW
GetProcAddress
GetPrivateProfileStringW
DeleteCriticalSection
GetFullPathNameW
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
FreeLibrary
InitializeCriticalSection

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

msvcp60

??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??0runtime_error@std@@QAE@ABV01@@Z
??1runtime_error@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

shlwapi

PathRemoveFileSpecW

msvcrt

_controlfp
__CxxFrameHandler
wcslen
wcscat
_waccess
_wcsicmp
wcsrchr
wcsncpy
??2@YAPAXI@Z
_CxxThrowException
??0exception@@QAE@ABV0@@Z
strlen
wprintf
free
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a08022c9d9902ca103962a740eb4842

Headers

File Characteristics

Imports

kernel32

advapi32

msvcp60

shlwapi

msvcrt

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 80KB - Virtual size: 80KB