edd09e4032aaf3f2f560d7378492672b_JaffaCakes118

General

Target

edd09e4032aaf3f2f560d7378492672b_JaffaCakes118
Size

171KB
MD5

edd09e4032aaf3f2f560d7378492672b
SHA1

96e231ee4e16b7052bb6f18c09da585fe026b0db
SHA256

72f44ac484006cfaf2b9a89e1b267801b819a579efdf80037e0841f2cd3d7dd1
SHA512

6c399065a225accf45fba96fe178264793029273c5b7df4f592a0492d80dd9a685677e09966fa1ca6adcad1ad2ced3b2558affc2555644b9ee3b7c0ff34b241c
SSDEEP

3072:6bNpBJzIdgUh/pk1x9KetIsE+PQ2xtDjcJV00qSXjDGCtHEGATkh4Vehez2s1pc8:udIdgUg1x9Key2L6mFSXjD7tHELk+khX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edd09e4032aaf3f2f560d7378492672b_JaffaCakes118

Files

edd09e4032aaf3f2f560d7378492672b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef28b82d336d7cc861e73a205bdba38b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontIndirectA

advapi32

RegDeleteKeyA
RegSetValueExA
RegQueryInfoKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyA
RegCloseKey
RegEnumKeyExA
RegQueryValueExA

ole32

CoCreateInstance
CLSIDFromString
CoTaskMemFree
StgCreateDocfile

shlwapi

PathAddBackslashA

kernel32

GetModuleHandleA
FlushInstructionCache
AddAtomA
CloseHandle
FlushFileBuffers
DeleteCriticalSection
InterlockedIncrement
LCMapStringW
GetStringTypeW
GetCurrentThreadId
HeapAlloc
GetCurrentProcess
EnumResourceNamesA
InterlockedDecrement
GetCurrentProcessId
IsBadCodePtr
EnterCriticalSection
LoadLibraryExA
IsDBCSLeadByteEx
InitializeCriticalSection
GetStringTypeA
IsBadReadPtr
LeaveCriticalSection
GetSystemTimeAsFileTime
SetStdHandle
SetFilePointer
LCMapStringA
RaiseException
GetLastError
SizeofResource

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

comdlg32

ChooseFontA
GetOpenFileNameA

shell32

Shell_NotifyIconA

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef28b82d336d7cc861e73a205bdba38b

Headers

File Characteristics

Imports

gdi32

advapi32

ole32

shlwapi

kernel32

setupapi

comdlg32

shell32

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 78KB - Virtual size: 78KB

.reloc Size: 1024B - Virtual size: 124KB

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 78KB - Virtual size: 78KB

.reloc
Size: 1024B - Virtual size: 124KB