ce2b440bb35d26a1ffa28cd24ba2b2a0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ce2b440bb35d26a1ffa28cd24ba2b2a0_JaffaCakes118
Size

125KB
MD5

ce2b440bb35d26a1ffa28cd24ba2b2a0
SHA1

f0cc9453ace789b062b9d158405b3546174be0b8
SHA256

403704028dfccef2a9632d9271c0107f7d9f00e4d77fa961e30a35e9ae4f3ee1
SHA512

8c635a5f95bf155f12c420cbf8459a9387253279a9fa3954156eab82cba5e61851241031c84d485198b6c22b3ee55620838ffa42e72efc368c141cd303fb1992
SSDEEP

3072:hUcaoMBfYkB/6jX0q/4muvbGFZzPojkbOeD/Is:WcahgMNuZZrbOO/7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce2b440bb35d26a1ffa28cd24ba2b2a0_JaffaCakes118

Files

ce2b440bb35d26a1ffa28cd24ba2b2a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

562310210fa0910652802556a600da5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wintrust

HTTPSCertificateTrust
WintrustGetDefaultForUsage
WinVerifyTrust
WintrustAddActionID

comdlg32

GetOpenFileNameA
CommDlgExtendedError

ole32

CoUninitialize
CoInitialize
ReleaseStgMedium
RevokeDragDrop
CoCreateInstance
RegisterDragDrop
DoDragDrop
CoDisconnectObject
CoInitializeSecurity
CreateStreamOnHGlobal
CreateOleAdviseHolder
StgCreateDocfile
CoTaskMemAlloc
StgOpenStorage
CoInitializeEx

kernel32

GetProfileIntA
SetLastError
OpenEventA
SetFileTime
CloseHandle
InterlockedCompareExchange
VirtualFree
HeapCreate
CreateEventW
GetSystemTimeAsFileTime
GetDateFormatW
GetTempPathA
MapViewOfFile
InterlockedExchange
GetCurrentProcess
WideCharToMultiByte
GetModuleHandleW
CreateFileW
OpenFileMappingA
GetLocaleInfoW
GetStringTypeExA
SetEndOfFile
GetModuleFileNameW
GetLocaleInfoA
SetUnhandledExceptionFilter
VirtualQuery
ExpandEnvironmentStringsW
FindResourceW
UnmapViewOfFile
VirtualAlloc
SetErrorMode
MultiByteToWideChar
LoadLibraryExW
CreateTimerQueueTimer
GetConsoleMode
WriteFile
GetCurrentThreadId
DuplicateHandle
CompareStringA
CreateMutexW
ReleaseMutex
GetShortPathNameW
GetSystemInfo
WaitForSingleObject
lstrcmpA
UnhandledExceptionFilter
HeapDestroy
lstrcatW
GetModuleFileNameA
CreateProcessW
GetFileSize
CreateFileMappingW
GetFileTime
GetThreadPriority
LoadResource
GetFileType
QueryPerformanceCounter
SetEvent
ReadFile

advapi32

RegCreateKeyExA
OpenProcessToken
RegQueryValueExA
LookupPrivilegeValueA
RegCreateKeyA
RegCloseKey
RegQueryInfoKeyA
AdjustTokenPrivileges
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA

user32

LoadStringW

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 105KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

562310210fa0910652802556a600da5e

Headers

File Characteristics

Imports

wintrust

comdlg32

ole32

kernel32

advapi32

user32

Sections

.text Size: 13KB - Virtual size: 12KB

.data Size: 7KB - Virtual size: 9KB

.rsrc Size: 7KB - Virtual size: 6KB

.edata Size: 105KB - Virtual size: 123KB

.text
Size: 13KB - Virtual size: 12KB

.data
Size: 7KB - Virtual size: 9KB

.rsrc
Size: 7KB - Virtual size: 6KB

.edata
Size: 105KB - Virtual size: 123KB