e43a9ce4428c308c05f43888f0e91dc1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e43a9ce4428c308c05f43888f0e91dc1_JaffaCakes118
Size

346KB
MD5

e43a9ce4428c308c05f43888f0e91dc1
SHA1

a77b6ad793ce2d6c27a554c7999b828ff3daf084
SHA256

3d53d0e919e8e26eaf90fc866e660f802458d54de135641562120e3868599926
SHA512

575cff906e2303e81dadfb1bd62b42e4f57b5645c2c154b7b7edc33e520121956698fe8b19cc9775b99eea8e2d21f96e2aaaae56ea78019cf14ea26a96cf13e8
SSDEEP

6144:5MjDSovoKyVpMMiev5v6VZ5mrEqJ+Rkqe71WWtxhAQZUHitez2iiEf:5MjDXvolXMMi5Vj2tJn4yxfM4ez2of

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e43a9ce4428c308c05f43888f0e91dc1_JaffaCakes118

Files

e43a9ce4428c308c05f43888f0e91dc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29cdd13044c1dc62a4c51fe9f41a3194

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

InternalGetWindowText
wvsprintfA
ChildWindowFromPointEx

msvcrt

free
malloc
_spawnlpe
_adjust_fdiv

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegOpenCurrentUser
RegSetValueExW
RegDeleteKeyW
RegEnumKeyExW

ntdll

DbgPrint
NtDisplayString

kernel32

ExitProcess
OutputDebugStringA
CloseHandle
SetLastError
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
QueryPerformanceCounter
OpenSemaphoreW
GetProcAddress
WaitForSingleObject
GetCurrentThreadId
GetLastError
ReleaseSemaphore
GetCurrentThread
PeekNamedPipe
LocalAlloc
lstrlenW
LocalFree
SetProcessAffinityMask
GetModuleHandleA
LoadLibraryA
GetCurrentProcessId
GetCurrentProcess

Sections

.text
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

29cdd13044c1dc62a4c51fe9f41a3194

Headers

File Characteristics

Imports

user32

msvcrt

advapi32

ntdll

kernel32

Sections

.text Size: 66KB - Virtual size: 68KB

.data Size: 138KB - Virtual size: 138KB

.rdata Size: 125KB - Virtual size: 125KB

.bss Size: - Virtual size: 12KB

.idata Size: 1KB - Virtual size: 1KB

.crt Size: 512B - Virtual size: 54B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 66KB - Virtual size: 68KB

.data
Size: 138KB - Virtual size: 138KB

.rdata
Size: 125KB - Virtual size: 125KB

.bss
Size: - Virtual size: 12KB

.idata
Size: 1KB - Virtual size: 1KB

.crt
Size: 512B - Virtual size: 54B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 12KB - Virtual size: 11KB