abb91ccac5ad01406229450966b84681_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

abb91ccac5ad01406229450966b84681_JaffaCakes118
Size

100KB
MD5

abb91ccac5ad01406229450966b84681
SHA1

6dd1d20d1709c3e270ae13735b847808dd13508d
SHA256

d0c728fa375999bbcfcae6c3b7a94de4b1016661160d947a38f62f9d263cb49e
SHA512

21d227011d02552053ef7b9bb697e7e48ad7341733f4a0cbf0f3bb67aae054fcd4a844379a85aee3aeca20560ad9df6e090fb7f106d7ed96a6c08590851c439b
SSDEEP

1536:KFFmWnDjUCy7y2LxoKKEddWo2sRWViFfxmHdw6t+rFDe2Ev:Mvap/10w6t+hDhk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abb91ccac5ad01406229450966b84681_JaffaCakes118

Files

abb91ccac5ad01406229450966b84681_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62532f334aa40a27f23ffeaf5a94c72b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
CreateFileA
CloseHandle
GetSystemDirectoryA
OpenProcess
GetTickCount
Process32Next
FlushFileBuffers
WriteConsoleW
TerminateProcess
CreateProcessA
WriteFile
CreateToolhelp32Snapshot
GetWindowsDirectoryA
CopyFileA
MoveFileExA
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
Sleep
CreateThread
DeleteFileA
Process32First
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSection
LoadLibraryA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RaiseException
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

FindWindowA
GetProcessWindowStation
GetUserObjectInformationA
CloseWindowStation
PostMessageA

advapi32

RegCloseKey
OpenSCManagerA
CloseServiceHandle
QueryServiceStatusEx
RegisterServiceCtrlHandlerExA
OpenServiceA
RegOpenKeyA
RegSetValueExA
SetServiceStatus
ChangeServiceConfigA
ControlService
StartServiceA
QueryServiceConfigA
StartServiceCtrlDispatcherA
RegQueryValueExA

shlwapi

PathFileExistsA

wininet

InternetOpenA
HttpOpenRequestA
InternetConnectA
HttpSendRequestA
InternetReadFile
InternetCloseHandle
InternetSetOptionA

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62532f334aa40a27f23ffeaf5a94c72b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

wininet

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 8KB - Virtual size: 5KB