f6bd9387871d2732b861616aa26d8c60_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f6bd9387871d2732b861616aa26d8c60_JaffaCakes118
Size

193KB
MD5

f6bd9387871d2732b861616aa26d8c60
SHA1

a63b8dab19597632c0973bcbad979bb9a307e552
SHA256

c16ab84ca96fb6ebbf3a199a7ee0b677bd6c47bdf9bd5b4b80ef6057dff485eb
SHA512

7dc471f01d9874f806ecd69a38ab770b3bd058634d1b5d695fd83262f30f7e289d9f624c58d045973995e690f52038c43f3312c033ffedc3342a0a1743146482
SSDEEP

3072:RkgT1FVV5SDr7+L9DAXqSvbTzD1O0x3Qo9sZBokN08bLXCxqqif9WXdnzxBML18K:Ggp1Kz/xgokBljVJ0nHMBnoQA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6bd9387871d2732b861616aa26d8c60_JaffaCakes118

Files

f6bd9387871d2732b861616aa26d8c60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39311d491d5ff058b4e856cef61ef76c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

shlwapi

SHDeleteKeyW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

kernel32

GetCurrentProcessId
GetCurrentDirectoryW
RtlUnwind
GetCommandLineA
HeapSize
SetStdHandle
LCMapStringA
CreateFileA
GetConsoleCP
InterlockedDecrement
VirtualAlloc
GetLocaleInfoW
SetHandleCount
GetThreadPriority
TerminateProcess
ReadFile
GetSystemTimeAsFileTime
DeleteCriticalSection
EnumSystemLocalesA
SetFilePointer
RaiseException
TlsAlloc
GetTickCount
HeapDestroy
WideCharToMultiByte
GlobalAlloc
InterlockedIncrement
SetCommTimeouts
GetConsoleMode
GetProcAddress
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleHandleA
WriteConsoleA
GetStdHandle
HeapFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
ExitProcess
EnumResourceNamesA
LoadLibraryA
GetEnvironmentStrings
GetStringTypeW
Sleep
TlsFree
TlsSetValue
GetLastError
GetModuleFileNameA
LCMapStringW
GetFullPathNameW
MultiByteToWideChar
SetLastError
GetUserDefaultLCID
HeapReAlloc
GetModuleFileNameW
ExitProcess
GetCurrentProcess
GetProcessHeap
LeaveCriticalSection
EnterCriticalSection
VirtualFree
GetCPInfo
FlushFileBuffers
GetLocaleInfoA
GetACP
GetVersionExA
GetStartupInfoA
IsValidLocale
TlsGetValue
GetConsoleOutputCP
GetCurrentThreadId
CloseHandle
GetOEMCP
UnhandledExceptionFilter
QueryPerformanceCounter
HeapCreate
SetEndOfFile
HeapAlloc
GetEnvironmentStringsW
GetFileType
GetStringTypeA
IsValidCodePage
WriteConsoleW
InitializeCriticalSection
WriteFile
GetFullPathNameA

user32

GetClassLongA
MessageBoxW

ole32

CoCreateGuid
StringFromGUID2
CoInitialize
CoUninitialize
CoCreateInstance
CoSetProxyBlanket

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39311d491d5ff058b4e856cef61ef76c

Headers

File Characteristics

Imports

rpcrt4

shlwapi

shell32

kernel32

user32

ole32

advapi32

Sections

.text Size: 165KB - Virtual size: 165KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 22KB

.crt Size: 512B - Virtual size: 84KB

.text
Size: 165KB - Virtual size: 165KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 22KB

.crt
Size: 512B - Virtual size: 84KB