a17a324ba03d023a36b4baf8a02bf5e0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a17a324ba03d023a36b4baf8a02bf5e0_JaffaCakes118
Size

167KB
MD5

a17a324ba03d023a36b4baf8a02bf5e0
SHA1

9ceef9bc8350075648a7bd251d5d8ac26ab12fa5
SHA256

405775d6b0c9a92fd10509b8ac5af46849b5338c372c36aaeff713800fd3be3d
SHA512

c14088f4d69ddf75aae4faee9c980b7e2bf663f5a4b0b1715c4f469d0c87d94fd561a7828548981e5c7c8be002fec44abc0dd5e9f341264c6117aff171520585
SSDEEP

3072:hupWJkyDQkQpaslj+a2ddXLS7WR178kXjSXw/6gQ47N61joysxBmK:hupqjDQkOauj+nlLdxN01hsjV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a17a324ba03d023a36b4baf8a02bf5e0_JaffaCakes118

Files

a17a324ba03d023a36b4baf8a02bf5e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86c2f9d6bdbfcd806cda7065710083aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyW

kernel32

GetThreadPriority
RaiseException
HeapSize
GetCPInfo
GetLastError
GetUserDefaultLCID
HeapCreate
GlobalAlloc
DeleteCriticalSection
GetLocaleInfoW
InterlockedDecrement
QueryPerformanceCounter
GetStringTypeW
InitializeCriticalSection
GetCommandLineA
GetEnvironmentStringsW
SetStdHandle
GetFileType
CreateFileA
GetProcAddress
SetHandleCount
SetCommTimeouts
RtlUnwind
TlsFree
GetCurrentDirectoryW
WideCharToMultiByte
VirtualFree
InterlockedIncrement
GetStdHandle
TlsAlloc
GetConsoleCP
WriteFile
GetModuleHandleA
TerminateProcess
IsDebuggerPresent
EnumResourceNamesA
GetConsoleMode
MultiByteToWideChar
FreeEnvironmentStringsW
HeapDestroy
IsValidLocale
HeapAlloc
GetCurrentProcessId
LCMapStringW
GetStartupInfoA
UnhandledExceptionFilter
GetCurrentThreadId
EnumSystemLocalesA
TlsGetValue
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleOutputCP
SetUnhandledExceptionFilter
FlushFileBuffers
GetProcessHeap
ExitProcess
GetACP
LCMapStringA
LeaveCriticalSection
VirtualAlloc
GetModuleFileNameW
SetEndOfFile
HeapFree
CloseHandle
EnterCriticalSection
GetStringTypeA
GetVersionExA
WriteConsoleA
GetTickCount
GetCurrentProcess
GetFullPathNameW
GetLocaleInfoA
GetOEMCP
HeapReAlloc
SetFilePointer
TlsSetValue
WriteConsoleW
LoadLibraryA
Sleep
ExitProcess
ReadFile
GetSystemTimeAsFileTime
IsValidCodePage
GetModuleFileNameA
SetLastError
GetFullPathNameA

user32

GetClassLongA
MessageBoxW

ole32

CoCreateGuid
CoUninitialize
CoCreateInstance
CoInitialize
StringFromGUID2
CoSetProxyBlanket

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

rpcrt4

UuidCreate

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86c2f9d6bdbfcd806cda7065710083aa

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

ole32

shell32

advapi32

rpcrt4

Sections

.text Size: 135KB - Virtual size: 134KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 28KB - Virtual size: 27KB

.crt Size: 512B - Virtual size: 76KB

.text
Size: 135KB - Virtual size: 134KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 28KB - Virtual size: 27KB

.crt
Size: 512B - Virtual size: 76KB