a5a7e5f11ef0924db2f26ebdd1c36aba_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a5a7e5f11ef0924db2f26ebdd1c36aba_JaffaCakes118
Size

169KB
MD5

a5a7e5f11ef0924db2f26ebdd1c36aba
SHA1

ab8dcc5efdf140a254feb1ba48aca4961c0bb7cb
SHA256

c888bc3a7e7883dcf00aa2fb3879ed1e8b91dfce69fea620c9bc4e6a1e6def0c
SHA512

19c1d52b46e8e372ea22166c2879a8903952398f06d6306dd1195c994d2ba2ee68ff490283a344f5074274c431cb3e89300a655c5daa870484c5e465e6160176
SSDEEP

3072:APcSN+xfqShc3Gt5jwPOOImHicAKI2660upM5Fef3i3VqwlaGqhgKhOyr+j:4cS4xRhc3Grj360n5U63Vq0gij

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5a7e5f11ef0924db2f26ebdd1c36aba_JaffaCakes118

Files

a5a7e5f11ef0924db2f26ebdd1c36aba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7860ddfa04a871ed5b6474905d82ece8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

ole32

CoInitializeEx
CoTaskMemFree
CoRevokeClassObject
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoFreeUnusedLibraries
StringFromCLSID
GetRunningObjectTable
CoRegisterClassObject
CreateItemMoniker
CLSIDFromString
StringFromGUID2
CoTaskMemAlloc

advapi32

RegSetValueA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA

user32

CopyRect
GetMessageA
RegisterWindowMessageA
PeekMessageA
RegisterClassA
wsprintfA
PostThreadMessageA
DispatchMessageA
wvsprintfA
MonitorFromWindow
GetQueueStatus
LoadStringA
CreateWindowExA
MsgWaitForMultipleObjects
DestroyWindow

oleacc

LresultFromObject
CreateStdAccessibleObject

shell32

SHGetSpecialFolderPathA

winmm

timeGetDevCaps
timeBeginPeriod
timeGetTime
timeEndPeriod

kernel32

LeaveCriticalSection
InterlockedIncrement
GetProcAddress
VirtualFree
InterlockedDecrement
LoadLibraryA
GetTapeParameters
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
ReleaseSemaphore
DeleteCriticalSection
SetEvent
LoadResource
TerminateThread
IsBadReadPtr
CloseHandle
GetSystemTimeAsFileTime
IsBadWritePtr
ClearCommError
EnterCriticalSection
VirtualAlloc
GetLastError
GetSystemTime
GetProcessHeap
CreateEventA
CreateThread
ResetEvent
lstrlenA
GlobalAlloc
CreateFileW
CreateMutexA
HeapFree
GetThreadPriority
EnumResourceNamesA
FreeLibrary
ReleaseMutex
GetModuleFileNameA
MultiByteToWideChar
GetExitCodeThread
SetThreadPriority
GetSystemInfo
CreateSemaphoreA
LocalFree
DisableThreadLibraryCalls
GetACP
LoadLibraryW
LockResource
FatalExit
GetVersionExA
FindResourceA
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentThread
Sleep
InitializeCriticalSection
GetModuleFileNameW
GetTickCount
ResumeThread
GetCurrentProcessId
ExitProcess

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7860ddfa04a871ed5b6474905d82ece8

Headers

File Characteristics

Imports

ole32

advapi32

user32

oleacc

shell32

winmm

kernel32

Sections

.text Size: 118KB - Virtual size: 117KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 46KB - Virtual size: 45KB

.lib Size: 512B - Virtual size: 88KB

.text
Size: 118KB - Virtual size: 117KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 46KB - Virtual size: 45KB

.lib
Size: 512B - Virtual size: 88KB