78fbbb4efa99e3d348a2b6231981aecd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

78fbbb4efa99e3d348a2b6231981aecd_JaffaCakes118
Size

76KB
MD5

78fbbb4efa99e3d348a2b6231981aecd
SHA1

6d0ff73b9fa3075dc46e09e0c025ac2e3eba5757
SHA256

77d16e8f898f6faf32b757bf3f1c37e42878b8babf2d10892023bbc5a1e171db
SHA512

87b1ee5e2eff88167b5cbbeda34e0d44f8a92346dabdbff11741a9568c25ac3012050bbf173641035c8ed00cbd936c7a75c47db2cf76e29f5bff9d99fe1b7ca9
SSDEEP

1536:5t/sX3cKDtpeA1QRlBOJdaC+GAyB2rpv9isu/8YZk2k:z/snPDjwl6EC+GABpvA1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78fbbb4efa99e3d348a2b6231981aecd_JaffaCakes118

Files

78fbbb4efa99e3d348a2b6231981aecd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4778976c777fb18d4cd506135581a788

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
FreeSid
RegOpenKeyW
RegCreateKeyExW
LookupAccountNameW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
LookupAccountSidW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyW
RegCloseKey

ole32

StringFromGUID2
CoGetMalloc
CoTaskMemAlloc
CoSetProxyBlanket
CoGetInterceptor
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
ReleaseStgMedium
StringFromCLSID

kernel32

GetCurrentProcess
WriteFile
InterlockedDecrement
CompareStringW
WritePrivateProfileSectionW
GlobalLock
GetModuleFileNameW
TerminateProcess
GlobalUnlock
UnhandledExceptionFilter
lstrcmpiW
CreateDirectoryW
LocalFree
GlobalAlloc
OutputDebugStringA
GetPrivateProfileSectionNamesW
GetCurrentThreadId
InterlockedIncrement
CreateFileW
GetProcAddress
CloseHandle
SetUnhandledExceptionFilter
QueryPerformanceCounter
ExpandEnvironmentStringsW
LocalAlloc
DeleteCriticalSection
GetVersion
GetFileAttributesExW
LoadLibraryA
GetPrivateProfileStringW
WritePrivateProfileStringW
FormatMessageW
GetFileAttributesW
GlobalFree
lstrlenW
GetLastError
LoadLibraryW
VirtualAlloc
InitializeCriticalSection
GetSystemTimeAsFileTime
GetModuleHandleW
GetTickCount
GetCurrentProcessId
SetLastError
GetModuleHandleA
Sleep

msacm32

acmGetVersion

ctl3d32

Ctl3dSetStyle
Ctl3dGetVer

ntdll

RtlFreeUnicodeString
RtlAllocateAndInitializeSid
RtlConvertSidToUnicodeString
RtlUnicodeStringToInteger

Sections

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4778976c777fb18d4cd506135581a788

Headers

File Characteristics

Imports

advapi32

ole32

kernel32

msacm32

ctl3d32

ntdll

Sections

.text Size: 512B - Virtual size: 428B

.rdata Size: 61KB - Virtual size: 61KB

.rsrc Size: 4KB - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.data Size: 6KB - Virtual size: 416KB

.text
Size: 512B - Virtual size: 428B

.rdata
Size: 61KB - Virtual size: 61KB

.rsrc
Size: 4KB - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.data
Size: 6KB - Virtual size: 416KB