688051f1af6a88e9cf8b371d62e9baa8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

688051f1af6a88e9cf8b371d62e9baa8_JaffaCakes118
Size

172KB
MD5

688051f1af6a88e9cf8b371d62e9baa8
SHA1

213c61d9e9a6f8e270a0db4b66f996cfe570bb4a
SHA256

e6055d33b683f98ce3a40be5fe1465a2e225d107e8347bc94614fee10f8db208
SHA512

6f6c21b98d80af6c0e7e741b2beb7cf7fd5715336c61d8eecf6254e62a035ef3326b3a62febc1b88969c78cdc39b312db8e645719af64b87a53f2cde743febd8
SSDEEP

3072:VCF6f1P8S92LGWuko2kr+1GA20i2tU/z6qJP2Pqb6ot5PLLtK9jpduIvR:VCF6+tCJkop+0A/kBPiq5t5PLRK97bR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
688051f1af6a88e9cf8b371d62e9baa8_JaffaCakes118

Files

688051f1af6a88e9cf8b371d62e9baa8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd568f8f388261cf266dc57d0045fa37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClassLongA
MessageBoxW

shlwapi

SHDeleteKeyW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

ole32

CoCreateGuid
CoInitialize
StringFromGUID2
CoCreateInstance
CoUninitialize
CoSetProxyBlanket

kernel32

HeapReAlloc
GetCurrentProcessId
HeapSize
GetFullPathNameW
GetCurrentDirectoryW
GetConsoleCP
RtlUnwind
GetThreadPriority
GetModuleHandleA
HeapAlloc
GetStringTypeA
SetHandleCount
LCMapStringW
GetSystemTimeAsFileTime
GetACP
VirtualAlloc
FreeEnvironmentStringsW
TerminateProcess
TlsFree
HeapCreate
WideCharToMultiByte
WriteConsoleA
Sleep
LeaveCriticalSection
GetLocaleInfoW
GetLastError
HeapFree
SetStdHandle
SetCommTimeouts
TlsGetValue
GetProcessHeap
IsDebuggerPresent
GetFileType
GetCurrentThreadId
WriteFile
EnumResourceNamesA
GetEnvironmentStrings
GetCPInfo
LCMapStringA
CreateFileA
QueryPerformanceCounter
DeleteCriticalSection
LoadLibraryA
GetCurrentProcess
GetProcAddress
GetStdHandle
ReadFile
GetStringTypeW
UnhandledExceptionFilter
GetTickCount
FreeEnvironmentStringsA
GetModuleFileNameA
GetConsoleOutputCP
ExitProcess
IsValidLocale
SetUnhandledExceptionFilter
GetVersionExA
VirtualFree
ExitProcess
SetFilePointer
SetEndOfFile
InitializeCriticalSection
WriteConsoleW
InterlockedIncrement
SetLastError
GlobalAlloc
CloseHandle
EnumSystemLocalesA
GetStartupInfoA
EnterCriticalSection
RaiseException
MultiByteToWideChar
FlushFileBuffers
GetEnvironmentStringsW
GetLocaleInfoA
GetCommandLineA
GetUserDefaultLCID
TlsAlloc
GetConsoleMode
GetModuleFileNameW
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsSetValue
HeapDestroy
GetFullPathNameA

rpcrt4

UuidCreate

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd568f8f388261cf266dc57d0045fa37

Headers

File Characteristics

Imports

user32

shlwapi

shell32

ole32

kernel32

rpcrt4

advapi32

Sections

.text Size: 150KB - Virtual size: 149KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 17KB - Virtual size: 17KB

.crt Size: 512B - Virtual size: 68KB

.text
Size: 150KB - Virtual size: 149KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 17KB - Virtual size: 17KB

.crt
Size: 512B - Virtual size: 68KB