a435c9ec0b23ecbb9f6b54cef539f57d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a435c9ec0b23ecbb9f6b54cef539f57d_JaffaCakes118
Size

220KB
MD5

a435c9ec0b23ecbb9f6b54cef539f57d
SHA1

8cb93404975fb086b1c3e741c6b3fcb2b10449db
SHA256

7f7f94b078d9832921472b6480f0b0f5f101b7eb04758501e9b799fe835b1485
SHA512

f9f1ae0408e65e56b2424d0e5ebdab1c1fd35e05afd9a68f7cc18080b9e412ce597b66b47e1bc7fdfc1eac1fdb51f3fae57fa55f3f915f328fa447796950527b
SSDEEP

6144:HfhorHVk7qaopyrOLn1KT2z99X5kdT8Z0twG9bM6Zyj:WrcDopEmtIwWbvZyj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a435c9ec0b23ecbb9f6b54cef539f57d_JaffaCakes118

Files

a435c9ec0b23ecbb9f6b54cef539f57d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

263b0e007b25e527eb6865b0c55f434d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
GetWindowsDirectoryA
MoveFileA
GetFileAttributesA
GetModuleFileNameA
Sleep
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle
ReadFile
SetFilePointer
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
CompareStringW
SetEnvironmentVariableA

advapi32

RegSetValueExA
RegDeleteValueA
RegCreateKeyExA

Exports

Exports

NR_RegAddKey
NR_RegAddKeyRaw
NR_RegClose
NR_RegDeleteEntry
NR_RegDeleteKey
NR_RegDeleteKeyRaw
NR_RegEnumEntries
NR_RegEnumSubkeys
NR_RegFlush
NR_RegGetEntry
NR_RegGetEntryInfo
NR_RegGetEntryString
NR_RegGetKey
NR_RegGetKeyRaw
NR_RegGetUsername
NR_RegIsWritable
NR_RegOpen
NR_RegSetBufferSize
NR_RegSetEntry
NR_RegSetEntryString
NR_RegSetUsername
NR_ShutdownRegistry
NR_StartupRegistry
VR_Close
VR_CreateRegistry
VR_Enum
VR_EnumUninstall
VR_GetDefaultDirectory
VR_GetPath
VR_GetRefCount
VR_GetUninstallUserName
VR_GetVersion
VR_InRegistry
VR_Install
VR_Remove
VR_SetDefaultDirectory
VR_SetRefCount
VR_SetRegDirectory
VR_UninstallAddFileToList
VR_UninstallCreateNode
VR_UninstallDeleteFileFromList
VR_UninstallDeleteSharedFilesKey
VR_UninstallDestroy
VR_UninstallEnumSharedFiles
VR_UninstallFileExistsInList
VR_ValidateComponent

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

263b0e007b25e527eb6865b0c55f434d

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 11KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 936B

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 11KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 936B