45fda9204bc47bc99a9b22dc594902b9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

45fda9204bc47bc99a9b22dc594902b9_JaffaCakes118
Size

158KB
MD5

45fda9204bc47bc99a9b22dc594902b9
SHA1

81457005d33591deddb549c18b91231093c8b1a9
SHA256

d010a8c52b307af6c4707651d0435dcb821a2fa57661f8a5a1b7de0838f2d19b
SHA512

4ebb61795f9f299daf6b992a540e33cee5e9a9fc769d10ea478bc1040a700461d874eeb99b80d4a4021841a5d0fb83807bd49f8255c4a10c2a2838ee71e8b903
SSDEEP

3072:zb8LZp3na3e+VW0j56stI+HD6cop48HE/6rWseGDT1Zro:X8LO356stl2HFE/6NX1Ro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45fda9204bc47bc99a9b22dc594902b9_JaffaCakes118

Files

45fda9204bc47bc99a9b22dc594902b9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0ad0a4ba89ef63f61e3aa4cbef5affa1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventW
RaiseException
lstrcmpiW
FindNextFileW
HeapReAlloc
VirtualQuery
GetModuleFileNameW
GetTickCount
FindClose
WriteFile
GetSystemDirectoryW
GetPrivateProfileStringW
ExpandEnvironmentStringsW
CreateDirectoryW
ReadFile
GetStartupInfoA
GetTempPathW
SetHandleInformation
GetWindowsDirectoryW
WaitForSingleObject
CreateProcessW
SetCommMask
LocalAlloc
WideCharToMultiByte
GetDateFormatW
CreateFileW
CopyFileW
FormatMessageA
GetCurrentDirectoryW
GetModuleHandleA
LocalReAlloc
InterlockedIncrement
GlobalFree
GetLogicalDriveStringsW
GetVolumeInformationW
LoadLibraryW
CreateMutexW
MultiByteToWideChar
GetCommandLineW
GetFileAttributesW
InterlockedExchange
DeleteFileW
lstrlenA
GetProcessHeap
GetPrivateProfileIntW
QueryPerformanceCounter
GetFullPathNameW
SetLastError
GetTimeFormatW
LocalFree
GetModuleHandleA
GetLastError
FreeLibrary
OpenMutexW
QueryDosDeviceW
lstrcmpW
GetPrivateProfileSectionW
GetExitCodeProcess
CloseHandle
HeapSize
ReleaseMutex
LoadLibraryA
GetVersionExA
Sleep
SetCurrentDirectoryW
FormatMessageW
lstrlenW
DeviceIoControl
GetCurrentThreadId
SetFilePointer
GetSystemTimeAsFileTime
IsValidLocale
FindFirstFileW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
GetCurrentProcess
GetProcAddress
GlobalAlloc
GetDiskFreeSpaceExW
GetDriveTypeW
InterlockedDecrement
HeapFree
IsProcessorFeaturePresent
GetCurrentProcessId

oleaut32

DllUnregisterServer
RegisterActiveObject
GetActiveObject

advapi32

RegisterServiceCtrlHandlerA
RegisterEventSourceA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DeregisterEventSource

ole32

CoTaskMemFree
CoCreateInstance
GetRunningObjectTable
CoInitialize
CreateItemMoniker
CoUninitialize

shell32

Shell_NotifyIconA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ojzfuw
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 139KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ad0a4ba89ef63f61e3aa4cbef5affa1

Headers

File Characteristics

Imports

kernel32

oleaut32

advapi32

ole32

shell32

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 7KB - Virtual size: 10KB

.ojzfuw Size: 3KB - Virtual size: 3KB

.edata Size: 139KB - Virtual size: 155KB

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 7KB - Virtual size: 10KB

.ojzfuw
Size: 3KB - Virtual size: 3KB

.edata
Size: 139KB - Virtual size: 155KB