062d88d8bdd8dcf14c7743b860e0ed79_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

062d88d8bdd8dcf14c7743b860e0ed79_JaffaCakes118
Size

193KB
MD5

062d88d8bdd8dcf14c7743b860e0ed79
SHA1

63b0557d883bd35cf17c03bc669eb141446cf16b
SHA256

b1961cad8b10f57e17ead2215968ed1514266e80a28110a5999943f38ded2682
SHA512

e6d5a77d997985ae3114ad0ce95a196e4d710e905b78f11b36c4a79f60f8c21a25e6ec8df8ae22f341f489ab573dd1b17f812d2758cd2effec8e57229e47b65f
SSDEEP

3072:RkgT1FVV5SDr7+L9DAXqSvbTzD1O0x3Qo9sZBokN08bLXCxqqif9WXdnzxBML18K:Ggp1Kz/xgokBljVJ0nHMBnoQA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
062d88d8bdd8dcf14c7743b860e0ed79_JaffaCakes118

Files

062d88d8bdd8dcf14c7743b860e0ed79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39311d491d5ff058b4e856cef61ef76c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

shlwapi

SHDeleteKeyW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

kernel32

GetCurrentProcessId
GetCurrentDirectoryW
RtlUnwind
GetCommandLineA
HeapSize
SetStdHandle
LCMapStringA
CreateFileA
GetConsoleCP
InterlockedDecrement
VirtualAlloc
GetLocaleInfoW
SetHandleCount
GetThreadPriority
TerminateProcess
ReadFile
GetSystemTimeAsFileTime
DeleteCriticalSection
EnumSystemLocalesA
SetFilePointer
RaiseException
TlsAlloc
GetTickCount
HeapDestroy
WideCharToMultiByte
GlobalAlloc
InterlockedIncrement
SetCommTimeouts
GetConsoleMode
GetProcAddress
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleHandleA
WriteConsoleA
GetStdHandle
HeapFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
ExitProcess
EnumResourceNamesA
LoadLibraryA
GetEnvironmentStrings
GetStringTypeW
Sleep
TlsFree
TlsSetValue
GetLastError
GetModuleFileNameA
LCMapStringW
GetFullPathNameW
MultiByteToWideChar
SetLastError
GetUserDefaultLCID
HeapReAlloc
GetModuleFileNameW
ExitProcess
GetCurrentProcess
GetProcessHeap
LeaveCriticalSection
EnterCriticalSection
VirtualFree
GetCPInfo
FlushFileBuffers
GetLocaleInfoA
GetACP
GetVersionExA
GetStartupInfoA
IsValidLocale
TlsGetValue
GetConsoleOutputCP
GetCurrentThreadId
CloseHandle
GetOEMCP
UnhandledExceptionFilter
QueryPerformanceCounter
HeapCreate
SetEndOfFile
HeapAlloc
GetEnvironmentStringsW
GetFileType
GetStringTypeA
IsValidCodePage
WriteConsoleW
InitializeCriticalSection
WriteFile
GetFullPathNameA

user32

GetClassLongA
MessageBoxW

ole32

CoCreateGuid
StringFromGUID2
CoInitialize
CoUninitialize
CoCreateInstance
CoSetProxyBlanket

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39311d491d5ff058b4e856cef61ef76c

Headers

File Characteristics

Imports

rpcrt4

shlwapi

shell32

kernel32

user32

ole32

advapi32

Sections

.text Size: 165KB - Virtual size: 165KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 22KB

.crt Size: 512B - Virtual size: 84KB

.text
Size: 165KB - Virtual size: 165KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 22KB

.crt
Size: 512B - Virtual size: 84KB