94aa1309df927e411d83b0ddbd1e36dd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

94aa1309df927e411d83b0ddbd1e36dd_JaffaCakes118
Size

131KB
MD5

94aa1309df927e411d83b0ddbd1e36dd
SHA1

3941df459f6a99a546ab6098c8867a9bfb1d281f
SHA256

cc0ed1204f653cc286525b28a22ada41eb668f5e0f4bd294bf7da040484aa642
SHA512

02e37990ac3e64df6097fd2c524d573634318b6c9ce65a682d4caadeff629a2717e3b5f4a821e5e8a00fa555f544f7a96f6d5c5d53b91d35e239fcd95a0410af
SSDEEP

3072:58wuSstWFyj0W70MRuWmqho/ZtrQ31VQ:5qnXRbho/fQ31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94aa1309df927e411d83b0ddbd1e36dd_JaffaCakes118

Files

94aa1309df927e411d83b0ddbd1e36dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8adcefe74eddb64e0e1d1851b13609e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
FreeSid
CheckTokenMembership
AllocateAndInitializeSid

user32

GetDesktopWindow
GetWindowRect
wsprintfA

ole32

CoCreateGuid
StringFromGUID2

oleaut32

SysAllocStringLen

ws2_32

WSAGetLastError
WSAStartup
WSCUnInstallNameSpace

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
lstrcpyW
lstrlenA
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
lstrcpynA
WideCharToMultiByte
lstrcatA
lstrcpyA
ExpandEnvironmentStringsA
VerLanguageNameA
GetSystemDefaultLangID
GetVersionExA
Sleep
CloseHandle
WriteFile
CreateFileW
DeleteFileA
LockResource
LoadResource
LoadLibraryA
FindResourceA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
ExitProcess
GetLocaleInfoA
HeapSize
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind

shell32

ShellExecuteExA
SHFileOperationA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8adcefe74eddb64e0e1d1851b13609e7

Headers

File Characteristics

Imports

advapi32

user32

ole32

oleaut32

ws2_32

kernel32

shell32

Sections

.text Size: 34KB - Virtual size: 34KB

.data Size: 3KB - Virtual size: 8KB

.rsrc Size: 92KB - Virtual size: 92KB

.text
Size: 34KB - Virtual size: 34KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 92KB - Virtual size: 92KB