0aa687c97ce8743497dbaa954e8a5f58_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0aa687c97ce8743497dbaa954e8a5f58_JaffaCakes118
Size

260KB
MD5

0aa687c97ce8743497dbaa954e8a5f58
SHA1

a703ab1f2d65c6f02a701e9c88691a9269cf504c
SHA256

e0ddf0941461e764e615ed4f883c8642b0c468d8b3f32902f7b3cbe8590b5f77
SHA512

7e2b852ca1c3daef0a107fc0a43894efce126d8153bcb4d250f9a9fd1498516b09f50b4028de576ed8ea411b038abf4069ccf3c614f32b9e981c7ee523f7a462
SSDEEP

768:2wLximhe8TZ6dcnK0v2Hfo2rgvY0naV2QGJ2Hfo2rgvY0DaV2QG:2wL8mheyohgQ3TGUhgQlTG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa687c97ce8743497dbaa954e8a5f58_JaffaCakes118

Files

0aa687c97ce8743497dbaa954e8a5f58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a85158ce09b5284bc7d8439436d826e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeResource
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileTime
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalMemoryStatus
LoadLibraryA
LoadResource
CreateProcessA
OpenProcess
ReadFile
ReadProcessMemory
RtlMoveMemory
RtlZeroMemory
SetCurrentDirectoryA
SetErrorMode
SetFileAttributesA
SetFilePointer
SizeofResource
Sleep
VirtualAlloc
VirtualFree
VirtualQueryEx
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
CreateMutexA
CreateFileA
CreateDirectoryA
CopyFileA
LockResource
CloseHandle

user32

MessageBoxA
wsprintfA
GetAsyncKeyState

shell32

ShellExecuteA

shlwapi

PathMatchSpecA
PathFindFileNameA

advapi32

GetUserNameA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ntdll

RtlDecompressBuffer

netapi32

NetApiBufferFree
NetUserEnum

psapi

GetModuleFileNameExA
EnumProcesses

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4a85158ce09b5284bc7d8439436d826e

Headers

File Characteristics

Imports

kernel32

user32

shell32

shlwapi

advapi32

ntdll

netapi32

psapi

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 148KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 148KB

.rsrc
Size: 1KB - Virtual size: 1KB