42509e15073ddb496c1dbfa89b36d83d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42509e15073ddb496c1dbfa89b36d83d_JaffaCakes118
Size

104KB
MD5

42509e15073ddb496c1dbfa89b36d83d
SHA1

b1bdeb931a695fb215373a1f93a7290a4cb5fcc3
SHA256

47bc3d0a7c2c4edb1481e441bf9dff8250731efb54c268f9d1107efb020947bb
SHA512

408aa00f2469ee941bef0a6aad05ad4184bfd2d52be161cc3aa9085d782d1d2a6ecd76591a396d310f1775826928b89101d773ec2b323d830295f7c3ba78986b
SSDEEP

1536:baV/zJsNQVb8pvpE9CoEaZHjTV8CsLDrUtdxbq:bKKRE9l4DItdxbq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42509e15073ddb496c1dbfa89b36d83d_JaffaCakes118

Files

42509e15073ddb496c1dbfa89b36d83d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b33fed732f0f1e9dd468b74364d8dc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo

kernel32

GetConsoleOutputCP
WriteConsoleA
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetWindowsDirectoryA
GetPrivateProfileStringA
GetModuleFileNameA
GetTempPathA
GetLastError
lstrlenA
LocalAlloc
LocalFree
DeleteFileA
SetFileAttributesA
WriteConsoleW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
FindClose
FindNextFileA
FindFirstFileA
CreateFileA
CreateDirectoryA
TerminateProcess
CreateSemaphoreA
RemoveDirectoryA
SetEnvironmentVariableA
GetEnvironmentVariableA
Sleep
SetEndOfFile
CompareStringA
CompareStringW
GetFileAttributesA
TlsGetValue
GetLocaleInfoA
RaiseException
RtlUnwind
GetLocalTime
WideCharToMultiByte
GetTimeZoneInformation
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCPInfo
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
ExitProcess
WriteFile
MultiByteToWideChar
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
LoadLibraryA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b33fed732f0f1e9dd468b74364d8dc1

Headers

File Characteristics

Imports

setupapi

kernel32

advapi32

shell32

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 4KB - Virtual size: 1KB