3988746ae55b2fc555792c854ed1a791_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3988746ae55b2fc555792c854ed1a791_JaffaCakes118
Size

101KB
MD5

3988746ae55b2fc555792c854ed1a791
SHA1

4f5fdfa3bd88da131bb87d1b56889324cf3c598f
SHA256

14c4a66a35e567eed45626b17a7e2254b7b5d4c78c34a847af3dd8111d7f0b5f
SHA512

941c0aa5978eb54efb736cc8f2376975cbbafcfdc05e60597feb00b9006f460c0e9a81bc15639c43b8164e8ebb6e135b19d1b53f27b98e01a0229b84f0e31784
SSDEEP

1536:UtKNL9IGRK0yIxqAZ0fkxdEFbP7QxKrocsufp4FAq1+7CP8dxn:DLXKcqOiFbP7QxKrocsufWuq1+7C4xn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3988746ae55b2fc555792c854ed1a791_JaffaCakes118

Files

3988746ae55b2fc555792c854ed1a791_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7822b94e93015e5a0040cb3c0cea0ad4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
CreateProcessW
GetCurrentProcess
WaitForSingleObject
SetEvent
GetPriorityClass
Sleep
GetVersionExW
GetExitCodeProcess
GetFileAttributesW
GetModuleFileNameW
CompareStringW
CreateFileMappingW
CreateEventW
SetCurrentDirectoryW
lstrcmpiW
OpenFileMappingW
OpenEventW
CloseHandle
MapViewOfFile
ExpandEnvironmentStringsW
SetPriorityClass
GetCommandLineW
ExitProcess
lstrcpyW
LocalAlloc
LocalLock
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LocalFree
lstrlenW
GetVersion
GetLastError
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetVersion
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
RaiseException

user32

WaitForInputIdle
MessageBoxW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
GetTokenInformation
OpenProcessToken

shell32

SHGetFileInfoW
ord51
CommandLineToArgvW
ShellExecuteExW

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear

shlwapi

ord176

comctl32

ord17

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

exever
Size: 565B - Virtual size: 565B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7822b94e93015e5a0040cb3c0cea0ad4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 25KB - Virtual size: 25KB

exever Size: 565B - Virtual size: 565B

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 25KB - Virtual size: 25KB

exever
Size: 565B - Virtual size: 565B