a007890c59aec2bf6091a9ff360e4bc6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a007890c59aec2bf6091a9ff360e4bc6_JaffaCakes118
Size

38KB
MD5

a007890c59aec2bf6091a9ff360e4bc6
SHA1

dfbc058b25b63661ea569f3e6b908bc057f4205c
SHA256

00033e74392da0c670cdc7e10daea73bccb37a55312440c6bdda2c7e863b4cf0
SHA512

434ac42d29a84cb48af15bb1a43c68a11e77bb23c2b967f2c000e51a02bc3c58c99d483117ecb80602089ffae0b46409c8f3a97b21793525dc4dbc18ade3d63e
SSDEEP

768:aVQggoUtzWHoRN2dOE5SihD0i73kAfSOGlwA6y4Q/UrmQ6:aVBdUN7RNErIihD0i70Af7Gly5+UaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a007890c59aec2bf6091a9ff360e4bc6_JaffaCakes118

Files

a007890c59aec2bf6091a9ff360e4bc6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

133e0434c46f9e8f4f6448fee5239dbf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HSCUpd.pdb

Imports

msvcrt

_controlfp
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_wcsicmp
swscanf
__CxxFrameHandler
free
malloc
_CxxThrowException
memmove
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
wcscpy
wcslen
wprintf

advapi32

RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegConnectRegistryW
RegCloseKey
RegOpenKeyExW

kernel32

GetModuleHandleA
FormatMessageW
VerifyVersionInfoW
VerSetConditionMask
GetLastError
GetFullPathNameW
ExpandEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GlobalLock
GlobalUnlock
GlobalFree
GlobalAlloc

ole32

CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoCreateInstance

oleaut32

SafeArrayGetUBound
SafeArrayGetLBound
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
VariantClear
SysAllocString
SysFreeString

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

133e0434c46f9e8f4f6448fee5239dbf

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

kernel32

ole32

oleaut32

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 512B - Virtual size: 224B

.rsrc Size: 1024B - Virtual size: 1024B

.ddata Size: 20KB - Virtual size: 20KB

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 512B - Virtual size: 224B

.rsrc
Size: 1024B - Virtual size: 1024B

.ddata
Size: 20KB - Virtual size: 20KB