8dc9e3bcd4437ae0764d9aa2a98a5028_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8dc9e3bcd4437ae0764d9aa2a98a5028_JaffaCakes118
Size

76KB
MD5

8dc9e3bcd4437ae0764d9aa2a98a5028
SHA1

568550142024a01ac3a865154c9740c9642e795a
SHA256

1a7b7fb33c4216ff27a2bf072f8b36b3448857a80166348be2da49096f9cbb45
SHA512

1e6302cf77ba476ec4c9e335d36acadefda973d07d82f09a3b381780c529edbc9a7e0050dc7e0cbb9bc6593ad621e3067bf3ae2a7091ae3b2a4b9cecf0db697b
SSDEEP

768:W17El6zEMXU6eFGFZIPN5e86Kqty8ZbciMNbWTqnaDwwcRHmPJsJ1pNto:R8zNzWN5ezKqmiMNb7a3mSJenNto

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc9e3bcd4437ae0764d9aa2a98a5028_JaffaCakes118

Files

8dc9e3bcd4437ae0764d9aa2a98a5028_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d2cefa88528e43655c8ced1515e7515

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
lstrlenA
lstrcpyA
lstrcpynA
lstrcatA
GetTempPathA
ExpandEnvironmentStringsA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
GetFileAttributesExA
GetVersionExA
FileTimeToLocalFileTime
SetFilePointer
WriteFile
CreateFileA
GetCurrentProcessId
CreateDirectoryA
GetLocalTime
FreeLibrary
LoadLibraryA
GetTickCount
SetEnvironmentVariableA
CompareStringW
CreateProcessA
lstrcmpiA
GetShortPathNameA
SetEvent
GetLastError
ResetEvent
CreateThread
CloseHandle
FileTimeToSystemTime
CreateEventA
CompareStringA
SetStdHandle
SetConsoleCtrlHandler
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WideCharToMultiByte
GetTimeZoneInformation
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA

user32

wsprintfA

advapi32

RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
SetServiceStatus
RegisterServiceCtrlHandlerA
RegOpenKeyExA

shell32

SHGetDesktopFolder
SHGetSpecialFolderPathA
SHGetFileInfoA

wininet

InternetOpenA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

shlwapi

SHDeleteKeyA
SHDeleteValueA

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d2cefa88528e43655c8ced1515e7515

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wininet

version

shlwapi

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 16B