d0aad6e49e2d735624e611fee73340a3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d0aad6e49e2d735624e611fee73340a3_JaffaCakes118
Size

167KB
MD5

d0aad6e49e2d735624e611fee73340a3
SHA1

f697ab4e89e94ab4771fe72ba59906ba39fa3b05
SHA256

0ca9e9ce2665925fc48f4997139d3ff52730b21948fa2abd32f52e23aee4bfd6
SHA512

58e95ad8048c4c87191a240aba149e177f425e34b048dd1497dfda0262aeac92064cc9cb351d8028b932362d1b5f886bdffdc8afe621878fd64c1b5e372529d1
SSDEEP

3072:XRMg1yWX9NfO/qatRGwHKmDG7b4RdLASnGX4fEsF7vecbpBo4j9S6Ypr:XR51FOywRGQhnQ4f/Fzjz9S6+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0aad6e49e2d735624e611fee73340a3_JaffaCakes118

Files

d0aad6e49e2d735624e611fee73340a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3c5e124d1906575f14fe9e76816929e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CoInitialize
CoUninitialize
CoCreateGuid
StringFromGUID2
CoSetProxyBlanket

rpcrt4

UuidCreate

shlwapi

SHDeleteKeyW

user32

GetClassLongA
MessageBoxW

kernel32

LoadLibraryA
HeapDestroy
GetThreadPriority
ReadFile
GetStartupInfoA
EnumSystemLocalesA
GetLocaleInfoW
Sleep
GetTickCount
VirtualFree
WriteConsoleA
GetConsoleOutputCP
SetEndOfFile
HeapReAlloc
TlsFree
GetStringTypeA
VirtualAlloc
SetFilePointer
HeapAlloc
GetCurrentDirectoryW
SetStdHandle
GetLocaleInfoA
InitializeCriticalSection
ExitProcess
MultiByteToWideChar
HeapFree
LCMapStringA
CreateFileA
SetCommTimeouts
WideCharToMultiByte
GetEnvironmentStringsW
GetStringTypeW
GetLastError
RaiseException
DeleteCriticalSection
GetFullPathNameW
UnhandledExceptionFilter
LeaveCriticalSection
GetCommandLineA
GetACP
EnumResourceNamesA
GetConsoleCP
GlobalAlloc
WriteFile
FreeEnvironmentStringsW
GetModuleFileNameW
GetCPInfo
GetCurrentProcess
GetSystemTimeAsFileTime
HeapSize
GetStdHandle
EnterCriticalSection
GetCurrentProcessId
FreeEnvironmentStringsA
IsDebuggerPresent
CloseHandle
ExitProcess
GetFileType
GetProcessHeap
GetModuleFileNameA
GetProcAddress
GetUserDefaultLCID
SetHandleCount
GetEnvironmentStrings
TlsSetValue
SetLastError
GetCurrentThreadId
FlushFileBuffers
TerminateProcess
HeapCreate
IsValidCodePage
LCMapStringW
InterlockedDecrement
GetOEMCP
GetConsoleMode
SetUnhandledExceptionFilter
WriteConsoleW
InterlockedIncrement
RtlUnwind
TlsGetValue
GetModuleHandleA
TlsAlloc
QueryPerformanceCounter
GetVersionExA
IsValidLocale
GetFullPathNameA

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3c5e124d1906575f14fe9e76816929e

Headers

File Characteristics

Imports

ole32

rpcrt4

shlwapi

user32

kernel32

advapi32

shell32

Sections

.text Size: 144KB - Virtual size: 144KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 18KB - Virtual size: 18KB

.crt Size: 512B - Virtual size: 68KB

.text
Size: 144KB - Virtual size: 144KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 18KB - Virtual size: 18KB

.crt
Size: 512B - Virtual size: 68KB