75cca09d7cce952601ee5b95ee732223_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

75cca09d7cce952601ee5b95ee732223_JaffaCakes118
Size

53KB
MD5

75cca09d7cce952601ee5b95ee732223
SHA1

dfd1724373745c3f917ea6f7e89edff3d1399d16
SHA256

7a6b88276cef6970f96a4b8f639d96a0d4e48446261a3ec318d81b02ae029885
SHA512

7dc2fcfcaa3d683a9dbe3ebae708a8874d85252466b03d0fd512afaa4e325ea4141a575d25fbc09eb9c33a0ac907c4dca5b6fdcef49affca685c08b133a35d4c
SSDEEP

1536:HOw3uhyiN+g1zRUvNdgKcL7cqKcNjlWLqv686HTya7AM:HOuuhyo+WFsdfcFWqvNe2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75cca09d7cce952601ee5b95ee732223_JaffaCakes118

Files

75cca09d7cce952601ee5b95ee732223_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c0f4cb4f29f3ea932a4ff6193e3b689

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemFree
OleInitialize
OleUninitialize

kernel32

GetStartupInfoA

shlwapi

StrChrW
StrRChrW
PathRemoveFileSpecW
PathCombineW
PathAppendW
PathBuildRootW
PathAddBackslashW
StrStrIW
PathFileExistsW

ntdll

NtAllocateVirtualMemory
RtlAdjustPrivilege

oleaut32

VariantClear

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

advapi32

RegEnumKeyW
RegSetValueExW
RegOpenKeyExA
RegDeleteKeyW
RegQueryInfoKeyW
RegUnLoadKeyW
RegEnumValueW
OpenProcessToken
RegFlushKey
RegQueryValueExA
FreeSid
RegSetValueW
RegCloseKey
EqualSid
RegCreateKeyExW
GetTokenInformation
LookupPrivilegeValueW
AllocateAndInitializeSid
RegOpenKeyExW
RegDeleteValueW
AdjustTokenPrivileges
RegSaveKeyW
RegLoadKeyW
RegQueryValueExW

msvcrt

memmove
_XcptFilter
memcpy
_wtoi
_wtol
_wcsicmp
_ultow
_amsg_exit
_vsnwprintf
longjmp
malloc
memset
_adjust_fdiv
_initterm
bsearch
free
_wcsnicmp
_setjmp3
_vsnprintf

gdi32

GetObjectW
GetStockObject
DeleteObject
GetDeviceCaps
CreateFontIndirectW

setupapi

SetupOpenInfFileW
SetupGetLineTextW
SetupOpenAppendInfFileW
SetupInstallFromInfSectionW
SetupSetDirectoryIdW
SetupFindNextLine
SetupCloseInfFile
SetupFindFirstLineW
SetupCloseFileQueue
SetupQueueCopyW
SetupDefaultQueueCallbackW
SetupTermDefaultQueueCallback
SetupCommitFileQueueW
SetupInitDefaultQueueCallbackEx
SetupGetStringFieldW
SetupOpenFileQueue

rpcrt4

RpcStringFreeW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8c0f4cb4f29f3ea932a4ff6193e3b689

Headers

File Characteristics

Imports

ole32

kernel32

shlwapi

ntdll

oleaut32

version

advapi32

msvcrt

gdi32

setupapi

rpcrt4

Sections

.text Size: 4KB - Virtual size: 3KB

.rsrc Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 72KB

.reloc Size: 512B - Virtual size: 24B

.rdata Size: 5KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 72KB

.reloc
Size: 512B - Virtual size: 24B

.rdata
Size: 5KB - Virtual size: 4KB