b6abe5793b6a1e850798aa642f29d25a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b6abe5793b6a1e850798aa642f29d25a_JaffaCakes118
Size

92KB
MD5

b6abe5793b6a1e850798aa642f29d25a
SHA1

33ba2e800284309a208dbe4221c7e40f8e6633e3
SHA256

de0837726b28f5511ff0d9e044935d0d88eeb7dfb51e4cbe8e99d7c9f0954110
SHA512

053902e5cb7dd26e53201365675e72f0389db9c912f7315d718cf492ded0bed9b56a63992577da786a35b44cf3156a56c3ff822ffff9f664df1f50393bba2654
SSDEEP

1536:OTUdFt1n6in6a81CxwpPWhmUMOEboKC6alJoIo:OaFyk0OE8KalJoIo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6abe5793b6a1e850798aa642f29d25a_JaffaCakes118

Files

b6abe5793b6a1e850798aa642f29d25a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51f37b05bbde5be3f377c657c5ba1b2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecA
PathAppendA
wnsprintfA

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
lstrcpyA
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
InitializeCriticalSection
InterlockedExchange
MultiByteToWideChar
SetStdHandle
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
SetFilePointer
GetCPInfo
GetOEMCP
GetStringTypeW
GetStringTypeA
IsBadCodePtr
GetLastError
lstrlenA
FlushFileBuffers
CloseHandle
DeleteCriticalSection
HeapFree
IsBadReadPtr
GetFileType
SetHandleCount
GetEnvironmentStringsW
ExitProcess
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte

user32

DialogBoxParamA
ShowWindow
EndDialog
SendMessageA
GetDesktopWindow
GetWindowRect
SetWindowPos
SetWindowTextA
GetDlgItem
LoadIconA

advapi32

RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51f37b05bbde5be3f377c657c5ba1b2e

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

shell32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 7KB

.shared Size: 4KB - Virtual size: 16B

.rsrc Size: 28KB - Virtual size: 27KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 7KB

.shared
Size: 4KB - Virtual size: 16B

.rsrc
Size: 28KB - Virtual size: 27KB