74c916def179c68f615447e55dbe9e99_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

74c916def179c68f615447e55dbe9e99_JaffaCakes118
Size

176KB
MD5

74c916def179c68f615447e55dbe9e99
SHA1

08c1a6e2d4d727bc09f201761e956ae4c3a14151
SHA256

62c4dd93f68295e64e5cea806dd9b6c2eecbf0955033bd40ee8706a47199511d
SHA512

1ef5e3bd614cfe194f21d5416a03dcde545404e3b3b244508812397559939091d59cbaced91fbb06d68e990054e36b56ac44c56ad6005a736fa1cbe36ef90755
SSDEEP

3072:R9KBAaOD9EX4v0o2fzUbaD7AKea/EVIJ/xFL6RqX/4cB236dALV4pay8M07yC:UrU98o2fzCezeasVG/XoqP4t36dopL7J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74c916def179c68f615447e55dbe9e99_JaffaCakes118

Files

74c916def179c68f615447e55dbe9e99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e51d6b724af47b068d7e810318c69098

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

ole32

CoUninitialize
CoCreateGuid
CoInitialize
CoCreateInstance
StringFromGUID2
CoSetProxyBlanket

shlwapi

SHDeleteKeyW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

kernel32

TerminateProcess
IsDebuggerPresent
GetStringTypeA
SetHandleCount
EnterCriticalSection
GetLocaleInfoA
GetThreadPriority
SetFilePointer
GetConsoleMode
GlobalAlloc
GetSystemTimeAsFileTime
GetCommandLineA
TlsGetValue
GetCurrentProcess
VirtualFree
SetLastError
RtlUnwind
GetModuleHandleA
EnumSystemLocalesA
LCMapStringA
GetConsoleCP
HeapSize
HeapAlloc
GetVersionExA
GetProcAddress
GetProcessHeap
CloseHandle
FreeEnvironmentStringsW
SetCommTimeouts
IsValidLocale
RaiseException
HeapFree
FreeEnvironmentStringsA
GetCPInfo
GetLastError
SetEndOfFile
WriteConsoleW
VirtualAlloc
IsValidCodePage
HeapCreate
GetConsoleOutputCP
GetStringTypeW
GetACP
TlsFree
SetUnhandledExceptionFilter
DeleteCriticalSection
FlushFileBuffers
EnumResourceNamesA
GetEnvironmentStringsW
GetLocaleInfoW
HeapReAlloc
WriteConsoleA
GetCurrentDirectoryW
GetCurrentProcessId
LCMapStringW
MultiByteToWideChar
QueryPerformanceCounter
InterlockedDecrement
HeapDestroy
Sleep
WriteFile
GetModuleFileNameA
GetOEMCP
WideCharToMultiByte
InterlockedIncrement
ReadFile
InitializeCriticalSection
GetUserDefaultLCID
ExitProcess
LoadLibraryA
ExitProcess
GetEnvironmentStrings
GetStdHandle
TlsAlloc
LeaveCriticalSection
UnhandledExceptionFilter
GetCurrentThreadId
TlsSetValue
GetFullPathNameW
CreateFileA
GetModuleFileNameW
GetFileType
GetTickCount
SetStdHandle
GetStartupInfoA
GetFullPathNameA

user32

GetClassLongA
MessageBoxW

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e51d6b724af47b068d7e810318c69098

Headers

File Characteristics

Imports

rpcrt4

ole32

shlwapi

shell32

advapi32

kernel32

user32

Sections

.text Size: 148KB - Virtual size: 148KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 23KB

.crt Size: 512B - Virtual size: 212KB

.text
Size: 148KB - Virtual size: 148KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 23KB

.crt
Size: 512B - Virtual size: 212KB