89a65774ac828c7ff53b3498894f45b6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

89a65774ac828c7ff53b3498894f45b6_JaffaCakes118
Size

354KB
MD5

89a65774ac828c7ff53b3498894f45b6
SHA1

5c7f135ffe15cc00d8bf9aa52816ce8e833944dd
SHA256

6a8b1d6deec18666a63fc606150faf775b0598ec00f6f0d6a2735f062d1fab34
SHA512

a9670ec638673f70cd4e4b2700fce86d3bfe49dd674501a90f7fd84f3cd7b60f2446f0937aba9475dabfd1528d70866c7e1d8d623bd832ab2092893c23887f52
SSDEEP

6144:287GT0slpI+Y8h17LwiH9JSEGZDD9mPKNQO0P6yZ:24S0sPk2P9lMDD9mus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a65774ac828c7ff53b3498894f45b6_JaffaCakes118

Files

89a65774ac828c7ff53b3498894f45b6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

99c6cea2c9cc0cd74c26d07e5cd53b8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetCurrentProcess
SetFileAttributesA
GetTickCount
GetComputerNameW
CompareStringW
CreateFileW
WriteConsoleW
SetStdHandle
DeleteCriticalSection
GetComputerNameA
LoadLibraryW
HeapReAlloc
RtlUnwind
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
ExitProcess
HeapSize
GetStringTypeW
IsProcessorFeaturePresent
LCMapStringW
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetCPInfo
RaiseException
GetStartupInfoW
SetEnvironmentVariableA
HeapSetInformation
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
InitializeCriticalSection
HeapCreate
HeapFree
HeapAlloc
DeviceIoControl
GetVersionExA
GetACP
GetDriveTypeA
FlushFileBuffers
SetEndOfFile
Sleep
CreateFileA
TerminateProcess
GetVersion
GetTimeZoneInformation
GetCurrentProcessId
MoveFileA
DeleteFileA
SetFileTime
GetFileTime
GetSystemDirectoryA
WriteFile
ReadFile
SetFilePointer
GetFileSize
CloseHandle
WaitForSingleObject
CreateSemaphoreA
FreeLibrary
GetLastError
GetProcAddress
LeaveCriticalSection
LoadLibraryA
EnterCriticalSection
HeapDestroy
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
OutputDebugStringA
GetCurrentThreadId
GetModuleHandleA
GetModuleFileNameA

user32

LoadStringA
LoadIconA
LoadCursorA
wsprintfA
GetKeyboardLayout
MapVirtualKeyExA
MapVirtualKeyA
EnumDisplaySettingsA
wsprintfW
GetKeyNameTextA
GetForegroundWindow
DefWindowProcA
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
CreateWindowExA
RegisterClassA

gdi32

GetStockObject

advapi32

RegDeleteKeyA
RegDeleteValueA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
GetUserNameA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

VariantClear
VariantInit
SysFreeString
SysAllocString
SysAllocStringLen

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99c6cea2c9cc0cd74c26d07e5cd53b8f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 187KB - Virtual size: 187KB

.rdata Size: 136KB - Virtual size: 135KB

.data Size: 15KB - Virtual size: 15KB

.rsrc Size: 1024B - Virtual size: 852B

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 187KB - Virtual size: 187KB

.rdata
Size: 136KB - Virtual size: 135KB

.data
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 1024B - Virtual size: 852B

.reloc
Size: 13KB - Virtual size: 13KB