7195a38142c908c1aa6ebb1a04757276_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7195a38142c908c1aa6ebb1a04757276_JaffaCakes118
Size

2.0MB
MD5

7195a38142c908c1aa6ebb1a04757276
SHA1

584c57a670cdb0485e9c5b0f5f70956f10fbb9b8
SHA256

8a55ae7e59c1a2a7e92c6703a83ed7291c03b145b5dd1047141c504107640ef5
SHA512

006f5b12578387d7517798609a832db75481d7e9ee9f485f17d87d2f526dc8e7a03eff235ab58accdc407d981d8fc16cc9722dae2239198678f66605db3a078c
SSDEEP

49152:C3m8L+XfCHFrmFutPW9eJp6B7m9A9Fx9ny53V/MpMeCV8Xqa:C28L4CHFrmFutPvpQ7EoFxyuX9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7195a38142c908c1aa6ebb1a04757276_JaffaCakes118

Files

7195a38142c908c1aa6ebb1a04757276_JaffaCakes118
.exe windows:4 windows x86 arch:x86

350d0040c35918dd2247358b59955f33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTitleA
GetCommState
SetSystemTime
FindNextChangeNotification
GetProcessHeap
GlobalDeleteAtom
PeekNamedPipe
GetStringTypeExW
GetTickCount
GlobalAddAtomA
TryEnterCriticalSection
FindFirstFileW
SwitchToFiber
GetOverlappedResult
GlobalAddAtomW
SetCurrentDirectoryA
SetEndOfFile
RemoveDirectoryW
GetHandleInformation
SetThreadLocale
CompareStringW
SetCommMask
GetDiskFreeSpaceW
EnumResourceLanguagesW
GetLogicalDriveStringsA
FileTimeToLocalFileTime
FindFirstFileExW
lstrcmpiW
ScrollConsoleScreenBufferA
GetCommandLineW
PurgeComm
GetPrivateProfileSectionW
SetCommTimeouts
ExitProcess
SetErrorMode
MoveFileExA
IsDBCSLeadByteEx
LocalReAlloc

advapi32

GetSecurityDescriptorDacl
GetCurrentHwProfileW
BuildTrusteeWithSidW
CloseServiceHandle
RegSetValueW
IsTextUnicode
CryptReleaseContext
AllocateAndInitializeSid
RegQueryValueExA
CryptImportKey
RegCreateKeyW
CryptGenRandom
AbortSystemShutdownW
SetServiceStatus
GetSidSubAuthorityCount
RegUnLoadKeyW

ole32

CoFreeAllLibraries
CoImpersonateClient
StgSetTimes
CoUninitialize

version

GetFileVersionInfoA
VerFindFileA
GetFileVersionInfoSizeA

user32

GetClipCursor
SetKeyboardState
GetMenuItemID
CharUpperA
wsprintfW
SetSysColors
LoadImageW
IsRectEmpty
AppendMenuW
GetKeyboardLayoutNameW
IsCharUpperA
RegisterDeviceNotificationW
ValidateRect
GetKeyboardState
GetWindow
TabbedTextOutW
SetClipboardViewer

msvcrt

_wmakepath
_mbsdec
strstr
time
rename
_popen
puts
bsearch
iswdigit
wcstok
fwprintf
_mbctoupper
_putenv
iswctype
swprintf
ftell
_finite
_sleep
_wspawnvp

Sections

.text
Size: 5KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

350d0040c35918dd2247358b59955f33

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

version

user32

msvcrt

Sections

.text Size: 5KB - Virtual size: 221KB

.text Size: 512B - Virtual size: 18B

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 5KB - Virtual size: 221KB

.text
Size: 512B - Virtual size: 18B

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 17KB - Virtual size: 16KB