02bdd5d0d9bc19190e8e518025d8d35d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

02bdd5d0d9bc19190e8e518025d8d35d_JaffaCakes118
Size

139KB
MD5

02bdd5d0d9bc19190e8e518025d8d35d
SHA1

a918be25472c5602807b679e52f5ab56ac904f9b
SHA256

6a39216bf802115461970d979edce76ef7b2d733998812f9fc3a6b54b7cce7bd
SHA512

b0b5e9707f8dd78581c30045a6b608685e490e0e429f0f1761c7f07d7f6aeafce5e54a5f932dab0b65b42f3f2ec60975819a80b2434fabc0900cb03bac3d4924
SSDEEP

3072:1so9Q3pNIIgPy0rcpE1B7LeFScxBwDSSBIUcaIqBFt0TAmlT:1te3kFrX7eocxBwjT1W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02bdd5d0d9bc19190e8e518025d8d35d_JaffaCakes118

Files

02bdd5d0d9bc19190e8e518025d8d35d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a3a7c1fc2ec65b6b40f9b0101b99706

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GetSystemDirectoryW
CreateEventA
GlobalMemoryStatus
LeaveCriticalSection
FileTimeToSystemTime
GetVolumeInformationA
QueryPerformanceCounter
GetSystemTime
GetLocalTime
CreateFileA
InitializeCriticalSection
InterlockedCompareExchange
EnterCriticalSection
RemoveDirectoryW
MoveFileW
FindNextFileW
FindFirstFileW
TlsGetValue
TlsAlloc
GetCurrentThreadId
GetCommandLineW
GetModuleHandleW
GetProfileStringW
WaitForMultipleObjects
ResetEvent
CreateDirectoryA
CopyFileA
DeleteFileA
FindFirstChangeNotificationA
GetFileAttributesA
DeleteCriticalSection
GetTempPathA
LCMapStringA
ReadFile
SetEndOfFile
LCMapStringW
LoadLibraryA
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP

advapi32

RegOpenKeyExA
OpenSCManagerA
CloseServiceHandle
RegDeleteKeyA
RegCreateKeyExA
QueryServiceStatus
RegOpenKeyA
RegCloseKey

ole32

CoUninitialize
CoCreateInstance
OleUninitialize
OleInitialize
CoInitialize

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a3a7c1fc2ec65b6b40f9b0101b99706

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 75KB - Virtual size: 75KB

.data Size: 6KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 708B

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 75KB - Virtual size: 75KB

.data
Size: 6KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 708B