3ab176d539a2ddc6423398faebd94b35_JaffaCakes118

General

Target

3ab176d539a2ddc6423398faebd94b35_JaffaCakes118
Size

70KB
MD5

3ab176d539a2ddc6423398faebd94b35
SHA1

02c7d2e7b9ba5b03d4f68ba133d32b7f993eb3f1
SHA256

489bddbc7c7f08f6fad44ef9598deb1ce80b257a5748773505262ab46ecb599e
SHA512

4f2809b5623c3df73cec09a13f2e26081995aea5e3fb9eec81c2e9df81ab7784f9d47909c9ec0a1fa4eca6379088495b5b1e31505fb4a1e77677f644681b3c77
SSDEEP

1536:1JCyLjVRJ1q87V0lTJ0uawXKR9ufsxT+8Zydg8LatyP+EF:DTL5RJ1q87VofXUuZOtyP+O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab176d539a2ddc6423398faebd94b35_JaffaCakes118

Files

3ab176d539a2ddc6423398faebd94b35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ccac2d89d4fd96ad27de6a0e9a311ddb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetProcAddress
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
CloseHandle
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetFileType
CreateFileA
GetCurrentProcessId
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
WriteFile
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
SetEndOfFile
ReadFile
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

RegOpenKeyExA
RegQueryValueExA
SystemFunction002
RegCloseKey

shlwapi

StrStrIA

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccac2d89d4fd96ad27de6a0e9a311ddb

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

Sections

.text Size: 58KB - Virtual size: 57KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 5KB - Virtual size: 11KB

.rsrc Size: 232KB - Virtual size: 232KB

.text
Size: 58KB - Virtual size: 57KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 232KB - Virtual size: 232KB