eed01c98c8d2c8af8acd512cae66c51c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eed01c98c8d2c8af8acd512cae66c51c_JaffaCakes118
Size

17KB
MD5

eed01c98c8d2c8af8acd512cae66c51c
SHA1

705f9b6634ee38accaa918b0dbb33511f91b48e1
SHA256

c3200c1ce7af5de4bf85364add4f72af82788b385f87e2f16549a26301a2b549
SHA512

7a5c5c0bc58cbecdd6199e4eb1c092a20711337575d45d8c9942240665e9a9f19081fbf7a753da3283e12bb983f90886dfeec5a51d00bf6f86a84bf14d54b806
SSDEEP

384:euVUeUAoO8krcmqBGqaMe7QfTR/ngZYX0uobxDo8F:5qeGmqY13S5giXjkxDo8F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eed01c98c8d2c8af8acd512cae66c51c_JaffaCakes118

Files

eed01c98c8d2c8af8acd512cae66c51c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b959994e9340146e9fd6db7b8d089b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
WriteFile
WideCharToMultiByte
Sleep
CopyFileW
ReadFile
CreateFileW
lstrcatA
MultiByteToWideChar
lstrlenW
GetLastError
CloseHandle
DeleteFileA
lstrcpyA
GetTickCount
GetModuleHandleA
CreateMutexA
HeapCreate
lstrcmpA
HeapDestroy
FindFirstFileA
FindClose
FindNextFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
HeapAlloc
lstrlenA
GetFileSize
CreateFileA
RtlUnwind
ExitProcess
GetCommandLineW

user32

DefWindowProcA
ShowWindow
DispatchMessageA
UpdateWindow
LoadCursorA
TranslateMessage
SetTimer
BeginPaint
IsWindow
GetWindowTextA
wsprintfW
EnumWindows
wsprintfA
KillTimer
EndPaint
GetMessageA
RegisterClassExA
PostQuitMessage
LoadIconA
CreateWindowExA
TranslateAcceleratorA

advapi32

RegSetValueExA
RegQueryValueExW
RegOpenKeyA
RegQueryValueExA

shell32

CommandLineToArgvW
SHGetFolderPathA
ShellExecuteA

ole32

CoUninitialize
CLSIDFromProgID
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SafeArrayUnaccessData
SysAllocStringByteLen
SafeArrayAccessData
SafeArrayCreateVector
SysAllocString

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b959994e9340146e9fd6db7b8d089b1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 8B

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 8B

.rsrc
Size: 2KB - Virtual size: 1KB