971b7d59ca2d1d0855d9d5991b4be9a5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

971b7d59ca2d1d0855d9d5991b4be9a5_JaffaCakes118
Size

598KB
MD5

971b7d59ca2d1d0855d9d5991b4be9a5
SHA1

277c150d4600eb1ea9eb1307ba6990a139436e4f
SHA256

7c0f2848109212bb12a2da39c504e2b2c2c56166bf4806dc479b22e8f7a9db2e
SHA512

b2130534df4f4db4048bcca2336b1071c69ecceffce3e937b992867eb2efee869b23a216e6118957a4b978ff47a0f1b23927455fa6a51eeef8226496f51e96c2
SSDEEP

6144:kvhj7Pme4HPwTDwaedX+SQ31rGS7qrs2N6phvlPB/yjQ+B1HXaTRL259QhAEkGB/:NxHPShA41iaqghZB6M+OmEkGDbtOe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
971b7d59ca2d1d0855d9d5991b4be9a5_JaffaCakes118

Files

971b7d59ca2d1d0855d9d5991b4be9a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b5adbf17bf30d766104968b76fd54b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
FormatMessageA
CreateDirectoryA
DeleteFileA
SetFileAttributesA
lstrlenW
RemoveDirectoryA
GetFullPathNameA
SearchPathA
GetTempPathA
GetTempFileNameA
FindClose
FindFirstFileA
FindNextFileA
CreateFileA
CloseHandle
GetFileSize
SetFilePointer
ReadFile
SetFileTime
WriteFile
SetEndOfFile
MultiByteToWideChar
CompareStringW
CompareFileTime
FileTimeToSystemTime
WaitForSingleObject
CreateEventA
ResetEvent
SetEvent
WaitForMultipleObjects
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
VirtualFree
VirtualAlloc
AreFileApisANSI
CreateThread
LocalFileTimeToFileTime
DosDateTimeToFileTime
FileTimeToDosDateTime
FileTimeToLocalFileTime
MoveFileA
SetConsoleCtrlHandler
lstrcpyA
SetFileApisToOEM
lstrcatA
GetTickCount
WideCharToMultiByte
HeapAlloc
HeapFree
GetProcessHeap
lstrlenA
GetCurrentThreadId
TlsSetValue
CompareStringA
GetLastError
TlsAlloc
LCMapStringW
LCMapStringA
GetCPInfo
LoadLibraryA
GetOEMCP
GetACP
TlsGetValue
SetLastError
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
RaiseException
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
SetUnhandledExceptionFilter
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetModuleHandleA
GetModuleFileNameA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapReAlloc
HeapSize
GetProcAddress
HeapCreate
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
GetStringTypeA
IsBadWritePtr
FlushFileBuffers
GetStringTypeW

user32

CharNextA
CharUpperA
CharPrevExA
CharUpperW
CharToOemA
CharPrevA
wsprintfA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

ole32

CoInitialize
CoUninitialize
CoTaskMemAlloc

oleaut32

VariantClear
SysAllocStringLen
SysStringLen
VariantCopy
SysFreeString
SysAllocString

Sections

.text
Size: 405KB - Virtual size: 405KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

96b5adbf17bf30d766104968b76fd54b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 405KB - Virtual size: 405KB

.rdata Size: 49KB - Virtual size: 48KB

.data Size: 26KB - Virtual size: 56KB

.rsrc Size: 117KB - Virtual size: 124KB

.text
Size: 405KB - Virtual size: 405KB

.rdata
Size: 49KB - Virtual size: 48KB

.data
Size: 26KB - Virtual size: 56KB

.rsrc
Size: 117KB - Virtual size: 124KB