bc80b3e334f7b2f2c838d544a2012f3e_JaffaCakes118

General

Target

bc80b3e334f7b2f2c838d544a2012f3e_JaffaCakes118
Size

112KB
MD5

bc80b3e334f7b2f2c838d544a2012f3e
SHA1

6d35e9f6253f3bb1e448366a448463f88b31a8cb
SHA256

dadd9c063f3e52b4c113d65492e12654108f6f6736bb158e457629ad4597469c
SHA512

5e03dd695aee58e333efcb70456e166ddb92a644618d4ba09d7b0396f2e4d03f8bb21f5bd645ce5a06bca4b1f56390f05484d922163a025bd7ca6b3a8a72118c
SSDEEP

1536:dxi/3qzwIp1KDoCpVJQs9R1g00+LQ+gHomxs:7i/3WPqoIQCRm0vdgHoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc80b3e334f7b2f2c838d544a2012f3e_JaffaCakes118

Files

bc80b3e334f7b2f2c838d544a2012f3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

448f51eae75a63a63ed7ce69360b3f66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
SetLastError
FormatMessageA
CloseHandle
GetLastError
HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
HeapFree
TerminateProcess
DeleteFileA
SetFileAttributesA
GetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
RemoveDirectoryA
lstrlenA
FreeLibrary
LocalAlloc
GetWindowsDirectoryA
GetVersionExA
MoveFileExA
GetSystemDirectoryA
ReadFile
SetEndOfFile
SetFilePointer
CreateFileA
GetStringTypeW
FlushFileBuffers
SetStdHandle
LocalFree
GetEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

advapi32

RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList

rpcrt4

UuidToStringA

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

448f51eae75a63a63ed7ce69360b3f66

Headers

File Characteristics

Imports

kernel32

advapi32

setupapi

rpcrt4

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 72KB - Virtual size: 72KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 72KB - Virtual size: 72KB