875695a51f55add7e5537bf62f873aa2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

875695a51f55add7e5537bf62f873aa2_JaffaCakes118
Size

265KB
MD5

875695a51f55add7e5537bf62f873aa2
SHA1

b86f6c9748455fa1c0c8d337e38b8e9f90bf6040
SHA256

f9363c119411473ee70d1b0e1bc17e89d53f47b9f0e68b91ae5fd9f8b18e28c9
SHA512

4be46d8276c8a37df06985174847c246781b4e9dde2b93ef29cea7c3ba99a107044fb571054648f47154b983c5061170c8f507052128d8f7e0c1d030a528b341
SSDEEP

6144:RR645kkdvmUgNsKM1Zb58/9ceKFKYy5V6MpMk:RBkkdvgCKgo/GeKFCl3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
875695a51f55add7e5537bf62f873aa2_JaffaCakes118

Files

875695a51f55add7e5537bf62f873aa2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

381b317d8d275f50c29bc0f3d09c91e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateMutexA
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
InitializeCriticalSection
FreeLibrary
GetModuleFileNameA
WaitForMultipleObjects
GetComputerNameA
GetModuleHandleA
LoadResource
FileTimeToSystemTime
GetLocalTime
GetCurrentProcessId
MultiByteToWideChar
GetExitCodeThread
GetCurrentProcess
ExitProcess
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
TlsAlloc
GetLastError
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
HeapCreate
IsBadWritePtr
GetStartupInfoA
GetEnvironmentStringsW
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetSystemInfo
CreateMutexW
GetProcAddress

query

CIState
CIGetGlobalPropertyList
?CoTaskAllocator@@3VCCoTaskAllocator@@A
LoadTextFilter
LoadIFilter

mscat32

CryptCATEnumerateAttr
CryptCATAdminAddCatalog
CryptCATOpen
CryptCATCDFEnumAttributes
CatalogCompactHashDatabase
CryptCATGetAttrInfo

Sections

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 5KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 102KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 116KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

381b317d8d275f50c29bc0f3d09c91e4

Headers

File Characteristics

Imports

kernel32

query

mscat32

Sections

.rdata Size: 9KB - Virtual size: 8KB

.text Size: 11KB - Virtual size: 12KB

.edata Size: 5KB - Virtual size: 39KB

.rdata Size: 2KB - Virtual size: 23KB

.edata Size: 102KB - Virtual size: 150KB

.data Size: 5KB - Virtual size: 292KB

.edata Size: 116KB - Virtual size: 190KB

.edata Size: 2KB - Virtual size: 458KB

.rsrc Size: 10KB - Virtual size: 10KB

.rdata
Size: 9KB - Virtual size: 8KB

.text
Size: 11KB - Virtual size: 12KB

.edata
Size: 5KB - Virtual size: 39KB

.rdata
Size: 2KB - Virtual size: 23KB

.edata
Size: 102KB - Virtual size: 150KB

.data
Size: 5KB - Virtual size: 292KB

.edata
Size: 116KB - Virtual size: 190KB

.edata
Size: 2KB - Virtual size: 458KB

.rsrc
Size: 10KB - Virtual size: 10KB