b9dd31b1d0c1b3ba0b1b7327ba02b2a5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b9dd31b1d0c1b3ba0b1b7327ba02b2a5_JaffaCakes118
Size

27KB
MD5

b9dd31b1d0c1b3ba0b1b7327ba02b2a5
SHA1

23a05ab430917a304eb732428aec0a7c1e6c9548
SHA256

931d63a2170e52e1cf0ee6eab55117f66e17c113cc9d939fdf0340f0673eacc8
SHA512

7b209b9f9ce8362dd0bab5c80d69bc12679dcbd11b48798e1b90407568cc013cdd29a8b5ce040282d688c36be2de1f917f73e0fba5a7db4d24825f0655fb457c
SSDEEP

384:Dgr9HOKPr2B6B6wPzh4nnmkun4mbJcWphW3Xjm2GVF7xuXonOlX29:4uKPrs2F4mk+JcWpMXybxb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9dd31b1d0c1b3ba0b1b7327ba02b2a5_JaffaCakes118

Files

b9dd31b1d0c1b3ba0b1b7327ba02b2a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35d24fc6198a3ca2af9ca2124a546bf7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetSystemInfo
lstrlenW
DeleteFileW
lstrcpyA
WriteFile
HeapAlloc
GetVersionExA
lstrcmpA
CreateDirectoryW
GetShortPathNameW
MultiByteToWideChar
GetTempPathW
HeapFree
GetTempFileNameW
GlobalFree
FreeLibrary
VirtualAlloc
GlobalAlloc
LCMapStringW
GetProcAddress
GetCPInfo
LoadLibraryA
GetLocaleInfoA
Sleep
WideCharToMultiByte
lstrcmpiA
GetStringTypeW
HeapReAlloc
LoadLibraryW
CreateFileA
GetLastError
GetProcessHeap
lstrcmpiW
VirtualProtect
GetModuleHandleA
CloseHandle
LCMapStringA
VirtualFree
lstrlenA
FormatMessageA
VirtualQuery

ntdll

LdrGetDllHandle
RtlLargeIntegerShiftLeft
NtAllocateVirtualMemory

setupapi

SetupOpenMasterInf
SetupDiEnumDeviceInfo
SetupCloseInfFile
SetupGetSourceInfoA
SetupDiSetClassInstallParamsA
SetupDiOpenDevRegKey
SetupDiCallClassInstaller
SetupDiGetDeviceInstanceIdW
SetupDiCreateDeviceInfoList
SetupPromptForDiskA
SetupDiGetClassDevsW
SetupGetSourceFileLocationA
SetupDiDestroyDeviceInfoList

advapi32

RegOpenKeyA
CloseServiceHandle
QueryServiceStatus
RegQueryValueExA
StartServiceA
RegSetValueExA
RegQueryValueExW
RegCloseKey
OpenServiceA
RegOpenKeyW
OpenSCManagerA
ChangeServiceConfigA
RegOpenKeyExA
RegEnumKeyA

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

tapi32

lineGetID
lineOpen
lineGetDevCapsW
lineClose
lineNegotiateAPIVersion
lineShutdown
lineInitializeExW

user32

wsprintfA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

35d24fc6198a3ca2af9ca2124a546bf7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

setupapi

advapi32

ole32

tapi32

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.data Size: 1KB - Virtual size: 72KB

.rsrc Size: 18KB - Virtual size: 17KB

.reloc Size: 512B - Virtual size: 20B

.rdata Size: 2KB - Virtual size: 2KB

.text
Size: 3KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 72KB

.rsrc
Size: 18KB - Virtual size: 17KB

.reloc
Size: 512B - Virtual size: 20B

.rdata
Size: 2KB - Virtual size: 2KB