759bced6d5d4a70f1961f25bc38661f5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

759bced6d5d4a70f1961f25bc38661f5_JaffaCakes118
Size

324KB
MD5

759bced6d5d4a70f1961f25bc38661f5
SHA1

775ead2878f1ab092cb0054016f38591a87a2ef9
SHA256

da144349ddcb74f63ef71f7cf83543731cc7f10ab09dc8a753652a51562411fc
SHA512

1710f4fa71e2fb6c4c7681f0c8473db6dbe55f6ab3d0a9b60db5dcf4108524dda1df8090920ff2e6c0db392cc21c9a3b1a32d3b3d207d72dc3d99a80691ac490
SSDEEP

6144:7x+ifq/yBGf/Uc3k2Fqj1ZWl8MCU2lP64t9WC1o699FfRlGU8aErWhD0LNTb9PSc:lpSN/JUEaW7CrP64XWsd9r5SaErwD0L2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
759bced6d5d4a70f1961f25bc38661f5_JaffaCakes118

Files

759bced6d5d4a70f1961f25bc38661f5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d94bf6328d51f0ad85f7256a32e7f5da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW

kernel32

lstrcpyW
lstrlenA
HeapDestroy
SizeofResource
LeaveCriticalSection
InitializeCriticalSection
lstrcmpiW
DeleteCriticalSection
InterlockedDecrement
GetModuleFileNameW
FindResourceW
MultiByteToWideChar
DisableThreadLibraryCalls
lstrcatW
GetStartupInfoA
InterlockedIncrement
lstrcpynW
EnterCriticalSection
LoadLibraryExW
GetACP
GetLastError
LoadResource

user32

CharNextW

msvcrt

_except_handler3
__CxxFrameHandler
malloc
_purecall
realloc
_adjust_fdiv
free
wcscpy
wcsncpy
_initterm
wcslen
wcsncat

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree

ntdll

RtlAdjustPrivilege
RtlAddAccessAllowedAceEx
NtAllocateVirtualMemory

rpcrt4

RpcStringFreeW

oleaut32

VariantClear

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d94bf6328d51f0ad85f7256a32e7f5da

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

ntdll

rpcrt4

oleaut32

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 1.4MB

.rdata Size: 298KB - Virtual size: 298KB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 1.4MB

.rdata
Size: 298KB - Virtual size: 298KB

.tls
Size: 512B - Virtual size: 4KB