aad68cc63095f97a0092dd7847097ed2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aad68cc63095f97a0092dd7847097ed2_JaffaCakes118
Size

459KB
MD5

aad68cc63095f97a0092dd7847097ed2
SHA1

ae334a1dbcf0b052acc927592e56c70ba4578404
SHA256

ef4d5e75bcf703093ca6b1845e6a021c14d698549bce0b8514ced36a0b03cf19
SHA512

f9945ad9af72068b51a403c89da6aeeca0f5d5635fc85c2fd19ece7e1164693cf789e069171fffc7bba85809acf8eb4477633ddaa23bd1b04b2b513673075826
SSDEEP

12288:4oU92dMpWEi1lcH+N9jFF95O4nNTNZDvw:k2si1l2+N9RF9k4nlE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aad68cc63095f97a0092dd7847097ed2_JaffaCakes118

Files

aad68cc63095f97a0092dd7847097ed2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82f74ff47e865d536a7a7215f3a15fa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
GetProcAddress
TlsSetValue
TlsGetValue
DeleteTimerQueueTimer
SetEvent
CreateEventW
CreateThread
WaitForSingleObject
GetTickCount
LoadLibraryExA
CloseHandle
InterlockedDecrement
InterlockedIncrement
GetProcessHeap
lstrcatA
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
GetModuleFileNameW
GetLocalTime
FormatMessageW
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
FindNextFileW
VirtualProtect
FindClose
FreeLibrary
lstrlenW
GetCommandLineA
GetCurrentThread
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersionExA
VirtualQuery
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetSystemInfo

advapi32

RegCreateKeyExW
GetLengthSid
CopySid
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
EqualSid
OpenThreadToken
FreeSid
AllocateAndInitializeSid
RegEnumKeyExW

ole32

CoCreateInstance
CoSwitchCallContext

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82f74ff47e865d536a7a7215f3a15fa7

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 265KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 265KB

.rsrc
Size: 1KB - Virtual size: 1KB