b8498ffd980e64b0d0c105066192f574_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b8498ffd980e64b0d0c105066192f574_JaffaCakes118
Size

276KB
MD5

b8498ffd980e64b0d0c105066192f574
SHA1

ada833ec78597a758e6f70e80431b923e8750d44
SHA256

236334f1a57b12f14377999e901a358cb809679586be83d5c759880d87fe3c1f
SHA512

233fe9a1b2540221bb05b0702867194106e9669f08d5b52c9818fc9b4a7c903e419403f273d5d0c6ef4ac2e122d753b6055f3086d3d7414af668f519e2575232
SSDEEP

3072:uYBhFU9rnnyu3E5oEwU0oNVpoexrqLLqFhsDb5ouKdr3NpAUWIP/C9oVi5d3Rlf1:t69rnn1ouy7DA5CxYbQ/FktRRies

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8498ffd980e64b0d0c105066192f574_JaffaCakes118

Files

b8498ffd980e64b0d0c105066192f574_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86828b2a3b582519ccad9d2bc640bc56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32First
CreateToolhelp32Snapshot
lstrlenA
LocalAlloc
LocalFree
DeleteFileA
FindClose
SetFileAttributesA
GetLastError
GetVersionExA
lstrcpyA
Sleep
FormatMessageA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
Process32Next
OpenProcess
TerminateProcess
CloseHandle
GetWindowsDirectoryA
GetPrivateProfileStringA
FindFirstFileA
CopyFileA
FlushFileBuffers
SetConsoleCtrlHandler
SetStdHandle
LoadLibraryA
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
IsBadWritePtr
VirtualAlloc
SetFilePointer
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
GetCurrentProcess
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetEnvironmentVariableA

user32

FindWindowA
MessageBoxA
SendMessageA

advapi32

RegEnumKeyExA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA

setupapi

SetupDiChangeState
SetupOpenInfFileA
SetupOpenFileQueue
SetupQueueDeleteSectionA
SetupInitDefaultQueueCallback
SetupCommitFileQueueA
SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupCloseInfFile
SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsA
SetupDefaultQueueCallbackA
SetupCopyOEMInfA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiRemoveDevice

shlwapi

SHDeleteKeyA

psapi

EnumProcesses
GetModuleFileNameExA

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�^�
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

86828b2a3b582519ccad9d2bc640bc56

Headers

File Characteristics

Imports

kernel32

user32

advapi32

setupapi

shlwapi

psapi

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 19KB

.idata Size: 8KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 4KB

�^� Size: 84KB - Virtual size: 84KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 19KB

.idata
Size: 8KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 4KB

�^�
Size: 84KB - Virtual size: 84KB