0aa901cdcc13c0466ff61646b9319565_JaffaCakes118

General

Target

0aa901cdcc13c0466ff61646b9319565_JaffaCakes118
Size

18KB
MD5

0aa901cdcc13c0466ff61646b9319565
SHA1

8a8bafcc00d52876334211bc0728c4243b8bf977
SHA256

724047c6763c7a439eb002357726285fa557db7af7f3eaf9f4914ea575559b23
SHA512

4a1ac2adb4240005bee376e0d5cc305124621752ff9cf2bb3905fcee76f2034ddc3594053634e39d6850b6db3964804b67264814a49321e9c3912a18d8c64f2d
SSDEEP

384:cz/OL8f/HFvvlCLhpxCaEgm6U0ShXFWWfcTvf29ujlU:cTOiHFUf63pwUcllU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa901cdcc13c0466ff61646b9319565_JaffaCakes118

Files

0aa901cdcc13c0466ff61646b9319565_JaffaCakes118
.exe windows:5 windows x86 arch:x86

133bbb9bb7617405478010b076617e7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

kernel32

GetLastError
lstrlenA
lstrcpynA
lstrcpyA
ExitProcess
LocalFree
FormatMessageA
Sleep
CreateFileA
VirtualAlloc
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
lstrcmpA
RaiseException
lstrcatA
lstrcmpW
GetCommandLineA
IsDebuggerPresent
RtlUnwind
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
ReadFile

user32

GetClientRect
wsprintfA
KillTimer
GetWindow
GetWindowRect
SetTimer
MessageBoxA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

ole32

CoTaskMemRealloc
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString
StringFromGUID2

oleaut32

LoadTypeLi
VariantInit
LoadRegTypeLi
VariantChangeType
VariantClear
VarUI4FromStr
VariantCopy

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

133bbb9bb7617405478010b076617e7c

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB