042aab85a958276b2630f06270b5346b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

042aab85a958276b2630f06270b5346b_JaffaCakes118
Size

419KB
MD5

042aab85a958276b2630f06270b5346b
SHA1

34b742370228652d24556503760f3dbe68c5e0a9
SHA256

dce1dd1d3e6511404c6c88af804ea035319330f32607713fe4a6481305bd1097
SHA512

d4dbf908f0259c0e21270bf88b6bee5484eae8dbeaecc144765fbb58958b3f8e0b8c7861dbbe6257e46d2119fbd374675bcb14e811c9f02f0cd52d4ca271e95b
SSDEEP

12288:k60F5j8c/erfQsDAdnI95ohCdpEiGLHEb7KJWNGGPfM+badIJBOv:dDht7PfxWdI7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
042aab85a958276b2630f06270b5346b_JaffaCakes118

Files

042aab85a958276b2630f06270b5346b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fbacefd3ead21f7791fe4f7fbfddefb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetVersion
GetStdHandle
GetStartupInfoA
RtlUnwind
GetCommandLineA
GetModuleFileNameW
GetCurrentProcess
GetProcAddress
VirtualAlloc
HeapCreate
TlsSetValue
HeapReAlloc
VirtualFree
FreeEnvironmentStringsW
UnhandledExceptionFilter
LeaveCriticalSection
InterlockedExchange
GetModuleFileNameA
SetHandleCount
GetModuleHandleA
ExitProcess
TlsFree
GetStartupInfoW
EnterCriticalSection
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
WriteFile
IsBadWritePtr
GetCurrentThread
QueryPerformanceCounter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStringsW
VirtualQuery
GetCurrentThreadId
InitializeCriticalSection
HeapAlloc
GetFileType
HeapFree
DeleteCriticalSection
TerminateProcess
GetCurrentProcessId
GetLastError
TlsAlloc
GetCommandLineW
MoveFileW
GetEnvironmentStrings
HeapDestroy
TlsGetValue

gdi32

GetBkMode
GetCharWidthFloatW
PlayEnhMetaFileRecord
ScaleWindowExtEx
CopyMetaFileA
CreateFontIndirectA
CreateDIBPatternBrushPt
SaveDC
DeleteMetaFile
GetColorAdjustment
GetRandomRgn
AddFontResourceW
GetEnhMetaFileA
SelectObject
CreateDCA
EndDoc
SetEnhMetaFileBits
CreateEllipticRgn
SetTextAlign
SetBkColor
UpdateICMRegKeyW
CancelDC
SetMiterLimit
SetBoundsRect
EnumICMProfilesW

advapi32

LookupAccountNameA
CryptEnumProviderTypesA
CryptDestroyKey
StartServiceA
CryptEnumProvidersW
RegReplaceKeyW
RegSaveKeyA
RevertToSelf
RegReplaceKeyA
CryptSetProviderW
CryptGetHashParam
LookupAccountSidW
CryptHashData
CryptAcquireContextW
RegEnumKeyExA
RegCreateKeyA
RegCreateKeyExW
GetUserNameW
CryptSetProvParam
RegCloseKey
RegQueryValueExW
RegRestoreKeyA
RegQueryValueW
RegDeleteKeyA
CryptSetKeyParam

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fbacefd3ead21f7791fe4f7fbfddefb

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 104KB - Virtual size: 104KB

.data Size: 301KB - Virtual size: 300KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 104KB - Virtual size: 104KB

.data
Size: 301KB - Virtual size: 300KB

.rsrc
Size: 12KB - Virtual size: 12KB