a46ced5a78f4de4438b180d086d32f31_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a46ced5a78f4de4438b180d086d32f31_JaffaCakes118
Size

176KB
MD5

a46ced5a78f4de4438b180d086d32f31
SHA1

e71ac6c34a6f1c2ad71e9291b90a45a770a73d8e
SHA256

d8a25703ea840f3b68504616dbadf2dbdc1eb5d2c7b509f75a143e7fc9306c29
SHA512

cd42dc0f1edcfc06e7ac7444718ca6e29607c437262c3c886328776fcdc2765374f2c60651e6833d702ebb6787406119698397ae4ce852e92c4b683736f74810
SSDEEP

3072:R9KBAaOD9EX4v0o2fzUbaD7AKea/EVIJ/xFL6RqX/4cB236dALV4pay8M07yC:UrU98o2fzCezeasVG/XoqP4t36dopL7J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a46ced5a78f4de4438b180d086d32f31_JaffaCakes118

Files

a46ced5a78f4de4438b180d086d32f31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e51d6b724af47b068d7e810318c69098

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

ole32

CoUninitialize
CoCreateGuid
CoInitialize
CoCreateInstance
StringFromGUID2
CoSetProxyBlanket

shlwapi

SHDeleteKeyW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

kernel32

TerminateProcess
IsDebuggerPresent
GetStringTypeA
SetHandleCount
EnterCriticalSection
GetLocaleInfoA
GetThreadPriority
SetFilePointer
GetConsoleMode
GlobalAlloc
GetSystemTimeAsFileTime
GetCommandLineA
TlsGetValue
GetCurrentProcess
VirtualFree
SetLastError
RtlUnwind
GetModuleHandleA
EnumSystemLocalesA
LCMapStringA
GetConsoleCP
HeapSize
HeapAlloc
GetVersionExA
GetProcAddress
GetProcessHeap
CloseHandle
FreeEnvironmentStringsW
SetCommTimeouts
IsValidLocale
RaiseException
HeapFree
FreeEnvironmentStringsA
GetCPInfo
GetLastError
SetEndOfFile
WriteConsoleW
VirtualAlloc
IsValidCodePage
HeapCreate
GetConsoleOutputCP
GetStringTypeW
GetACP
TlsFree
SetUnhandledExceptionFilter
DeleteCriticalSection
FlushFileBuffers
EnumResourceNamesA
GetEnvironmentStringsW
GetLocaleInfoW
HeapReAlloc
WriteConsoleA
GetCurrentDirectoryW
GetCurrentProcessId
LCMapStringW
MultiByteToWideChar
QueryPerformanceCounter
InterlockedDecrement
HeapDestroy
Sleep
WriteFile
GetModuleFileNameA
GetOEMCP
WideCharToMultiByte
InterlockedIncrement
ReadFile
InitializeCriticalSection
GetUserDefaultLCID
ExitProcess
LoadLibraryA
ExitProcess
GetEnvironmentStrings
GetStdHandle
TlsAlloc
LeaveCriticalSection
UnhandledExceptionFilter
GetCurrentThreadId
TlsSetValue
GetFullPathNameW
CreateFileA
GetModuleFileNameW
GetFileType
GetTickCount
SetStdHandle
GetStartupInfoA
GetFullPathNameA

user32

GetClassLongA
MessageBoxW

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e51d6b724af47b068d7e810318c69098

Headers

File Characteristics

Imports

rpcrt4

ole32

shlwapi

shell32

advapi32

kernel32

user32

Sections

.text Size: 148KB - Virtual size: 148KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 23KB

.crt Size: 512B - Virtual size: 212KB

.text
Size: 148KB - Virtual size: 148KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 23KB

.crt
Size: 512B - Virtual size: 212KB