8e38f9a996e785b6abcf7ebcc968d177_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8e38f9a996e785b6abcf7ebcc968d177_JaffaCakes118
Size

193KB
MD5

8e38f9a996e785b6abcf7ebcc968d177
SHA1

99908ebb840937c01b8843d65ac457bcd07d10d2
SHA256

5a9a8d4af871c56658499d1d0f8a7cab6bf710e7e580e682677bb6fa058f932f
SHA512

98a27b7dd2eea3b471d5aea040113667f809084c0b64be78f1caa80a3a58fadc3aa4aaa56160079b586d1ef547ade59e62a5f2da3f0c64f2ef11b0daf58413b4
SSDEEP

3072:RkgT1FVV5SDr7+L9DAXqSvbTzD1O0x3Qo9sZBokN08bLXCxqqif9WXdnzxBML18K:Ggp1Kz/xgokBljVJ0nHMBnoQA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e38f9a996e785b6abcf7ebcc968d177_JaffaCakes118

Files

8e38f9a996e785b6abcf7ebcc968d177_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39311d491d5ff058b4e856cef61ef76c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

shlwapi

SHDeleteKeyW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

kernel32

GetCurrentProcessId
GetCurrentDirectoryW
RtlUnwind
GetCommandLineA
HeapSize
SetStdHandle
LCMapStringA
CreateFileA
GetConsoleCP
InterlockedDecrement
VirtualAlloc
GetLocaleInfoW
SetHandleCount
GetThreadPriority
TerminateProcess
ReadFile
GetSystemTimeAsFileTime
DeleteCriticalSection
EnumSystemLocalesA
SetFilePointer
RaiseException
TlsAlloc
GetTickCount
HeapDestroy
WideCharToMultiByte
GlobalAlloc
InterlockedIncrement
SetCommTimeouts
GetConsoleMode
GetProcAddress
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleHandleA
WriteConsoleA
GetStdHandle
HeapFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
ExitProcess
EnumResourceNamesA
LoadLibraryA
GetEnvironmentStrings
GetStringTypeW
Sleep
TlsFree
TlsSetValue
GetLastError
GetModuleFileNameA
LCMapStringW
GetFullPathNameW
MultiByteToWideChar
SetLastError
GetUserDefaultLCID
HeapReAlloc
GetModuleFileNameW
ExitProcess
GetCurrentProcess
GetProcessHeap
LeaveCriticalSection
EnterCriticalSection
VirtualFree
GetCPInfo
FlushFileBuffers
GetLocaleInfoA
GetACP
GetVersionExA
GetStartupInfoA
IsValidLocale
TlsGetValue
GetConsoleOutputCP
GetCurrentThreadId
CloseHandle
GetOEMCP
UnhandledExceptionFilter
QueryPerformanceCounter
HeapCreate
SetEndOfFile
HeapAlloc
GetEnvironmentStringsW
GetFileType
GetStringTypeA
IsValidCodePage
WriteConsoleW
InitializeCriticalSection
WriteFile
GetFullPathNameA

user32

GetClassLongA
MessageBoxW

ole32

CoCreateGuid
StringFromGUID2
CoInitialize
CoUninitialize
CoCreateInstance
CoSetProxyBlanket

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39311d491d5ff058b4e856cef61ef76c

Headers

File Characteristics

Imports

rpcrt4

shlwapi

shell32

kernel32

user32

ole32

advapi32

Sections

.text Size: 165KB - Virtual size: 165KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 22KB

.crt Size: 512B - Virtual size: 84KB

.text
Size: 165KB - Virtual size: 165KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 22KB

.crt
Size: 512B - Virtual size: 84KB