a7afedbe8d04b834e4d56a1bcd0f87b1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a7afedbe8d04b834e4d56a1bcd0f87b1_JaffaCakes118
Size

80KB
MD5

a7afedbe8d04b834e4d56a1bcd0f87b1
SHA1

1b49a18cbd706c36da26f98a42ea021627c915d4
SHA256

aeb896daca98719957cfaccefe4a20db7a43be71633373002f295761dc333e90
SHA512

1dd0fd92ef676c2276b55ab5c6e62259a775f8b652015ce1ef4a6148e6ae69de10d0718612befb9cfe1873c5a5aef7d95204a9602cec46a89dcbc7676450cfed
SSDEEP

1536:1GgJ6xYLSTVhj8i0Zm5UEGlfVybjcytW:sgJ7LSTVhiaGlNyMytW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7afedbe8d04b834e4d56a1bcd0f87b1_JaffaCakes118

Files

a7afedbe8d04b834e4d56a1bcd0f87b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

055cbb80e7897bd837365fee6827fccf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

DeleteUrlCacheEntry

urlmon

URLDownloadToFileA

kernel32

GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
TerminateProcess
DeleteFileA
FreeLibrary
GetProcAddress
MultiByteToWideChar
DeviceIoControl
GetSystemDirectoryA
GetVersionExA
LoadLibraryA
Sleep
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FlushFileBuffers
SetFilePointer
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
ReadFile
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapAlloc
HeapFree
RtlUnwind
GetLastError
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
GetCurrentProcess
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate

user32

wsprintfA

advapi32

OpenServiceA
CloseServiceHandle
QueryServiceStatus
ControlService
DeleteService
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

ole32

CoUninitialize

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

055cbb80e7897bd837365fee6827fccf

Headers

File Characteristics

Imports

wininet

urlmon

kernel32

user32

advapi32

shell32

ole32

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 28KB

.sxdata Size: 4KB - Virtual size: 124B

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 28KB

.sxdata
Size: 4KB - Virtual size: 124B