5a023d2cb25cf0f03b9988125a2d09fd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5a023d2cb25cf0f03b9988125a2d09fd_JaffaCakes118
Size

324KB
MD5

5a023d2cb25cf0f03b9988125a2d09fd
SHA1

d97f98449ad798af7a7cda1dbe3ca437fd367aad
SHA256

6e8af192c43ab2e27df29f09b98e247f7805cbd4a5bf1b36b6eacd57ce6fadb4
SHA512

d514a3497940ab03029b008108f78a6c6d5408e7eefa580576b4e9aa378fd5cb01e82a1cd5b37f2e8d422b996b51dd9bb798e25ff09c4d1b2e2b7243c8f7c5e9
SSDEEP

6144:5xzEWbuCNYyssyrUX8pYF3I0pOhXrP0NNpAtW5PaH6PwXW7OavpN2kguH:5N/a+reYlPkXjSmW5PaqwGHJgu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a023d2cb25cf0f03b9988125a2d09fd_JaffaCakes118

Files

5a023d2cb25cf0f03b9988125a2d09fd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

10144eb9de2e16b61adb9e935ca72c4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantClear

msvcrt

_adjust_fdiv
wcscpy
_purecall
_initterm
wcsncpy
malloc
wcsncat
free
wcslen
__CxxFrameHandler
realloc
_except_handler3

advapi32

RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW

ole32

CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

user32

CharNextW

kernel32

MultiByteToWideChar
InitializeCriticalSection
LoadResource
DeleteCriticalSection
lstrlenW
FindResourceW
EnterCriticalSection
lstrcmpiW
FreeLibrary
HeapDestroy
lstrlenA
GetModuleFileNameW
GetLastError
GetACP
lstrcpyW
LoadLibraryExW
DisableThreadLibraryCalls
GetStartupInfoA
SizeofResource
LeaveCriticalSection
lstrcatW
InterlockedDecrement

ntdll

RtlAddAccessAllowedAceEx
NtAllocateVirtualMemory
RtlAdjustPrivilege

rpcrt4

RpcStringFreeW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

10144eb9de2e16b61adb9e935ca72c4d

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

msvcrt

advapi32

ole32

user32

kernel32

ntdll

rpcrt4

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 1.4MB

.rdata Size: 298KB - Virtual size: 298KB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 1.4MB

.rdata
Size: 298KB - Virtual size: 298KB

.tls
Size: 512B - Virtual size: 4KB