42f5b476a5a966f8d792e0366fe12ec7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42f5b476a5a966f8d792e0366fe12ec7_JaffaCakes118
Size

265KB
MD5

42f5b476a5a966f8d792e0366fe12ec7
SHA1

a6a4ea12c346d3fa358b5b70e694b0080a8303c4
SHA256

80ed24c162a6225f5076d1ea9a6fea8f3d76c7232c08a6b1c6fdf02b35ae50d2
SHA512

0777e0baca3be96b18588c402581d30f36194a4b507316f83eb69ea5c09ccd58a5aea3ce489f6ff1b8935db399e2066153ae1464dd0bef460b92bd96262937cf
SSDEEP

6144:BR645kkdvmUgNsKM1Zb58/9ceKFKYy5V6MpMk:BBkkdvgCKgo/GeKFCl3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f5b476a5a966f8d792e0366fe12ec7_JaffaCakes118

Files

42f5b476a5a966f8d792e0366fe12ec7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

381b317d8d275f50c29bc0f3d09c91e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateMutexA
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
InitializeCriticalSection
FreeLibrary
GetModuleFileNameA
WaitForMultipleObjects
GetComputerNameA
GetModuleHandleA
LoadResource
FileTimeToSystemTime
GetLocalTime
GetCurrentProcessId
MultiByteToWideChar
GetExitCodeThread
GetCurrentProcess
ExitProcess
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
TlsAlloc
GetLastError
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
HeapCreate
IsBadWritePtr
GetStartupInfoA
GetEnvironmentStringsW
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetSystemInfo
CreateMutexW
GetProcAddress

query

CIState
CIGetGlobalPropertyList
?CoTaskAllocator@@3VCCoTaskAllocator@@A
LoadTextFilter
LoadIFilter

mscat32

CryptCATEnumerateAttr
CryptCATAdminAddCatalog
CryptCATOpen
CryptCATCDFEnumAttributes
CatalogCompactHashDatabase
CryptCATGetAttrInfo

Sections

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 5KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 102KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 116KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

381b317d8d275f50c29bc0f3d09c91e4

Headers

File Characteristics

Imports

kernel32

query

mscat32

Sections

.rdata Size: 9KB - Virtual size: 8KB

.text Size: 11KB - Virtual size: 12KB

.edata Size: 5KB - Virtual size: 39KB

.rdata Size: 2KB - Virtual size: 23KB

.edata Size: 102KB - Virtual size: 150KB

.data Size: 5KB - Virtual size: 292KB

.edata Size: 116KB - Virtual size: 190KB

.edata Size: 2KB - Virtual size: 458KB

.rsrc Size: 10KB - Virtual size: 10KB

.rdata
Size: 9KB - Virtual size: 8KB

.text
Size: 11KB - Virtual size: 12KB

.edata
Size: 5KB - Virtual size: 39KB

.rdata
Size: 2KB - Virtual size: 23KB

.edata
Size: 102KB - Virtual size: 150KB

.data
Size: 5KB - Virtual size: 292KB

.edata
Size: 116KB - Virtual size: 190KB

.edata
Size: 2KB - Virtual size: 458KB

.rsrc
Size: 10KB - Virtual size: 10KB