0bca86788fe39fa30fd4c84ebefbc50e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0bca86788fe39fa30fd4c84ebefbc50e_JaffaCakes118
Size

143KB
MD5

0bca86788fe39fa30fd4c84ebefbc50e
SHA1

099a099107eccb356ba3754c808caa8e729a695a
SHA256

0b90ff1ac613cbe1d66bc531e578239c2c8567d8bf9b9842211462d1cdca91e3
SHA512

cdebb046393de218add9082b252956e56b3c42b7b9305852fb61250217f4e8deb95bbd9c8378090ef65c7fe080a2bc70d47d2a57008f6a56113ad23cf2cfb9e0
SSDEEP

3072:ZzKnaN1SYCpkbmKZs7c6a6ToXyQnxODeYoicKe:pKoM+f6DE1O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bca86788fe39fa30fd4c84ebefbc50e_JaffaCakes118

Files

0bca86788fe39fa30fd4c84ebefbc50e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

945ef280205f339e1d68d867f2f75110

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileW
GetConsoleMode
GetCurrentProcess
GetConsoleOutputCP
CreateDirectoryA
CreateThread
DeleteFileA
GetFileTime
GetFileSize
GetComputerNameA
GetCurrentProcessId
GetOEMCP
GetStdHandle
DeleteAtom
GetCommandLineA
GetLastError
GetUserDefaultLangID
GetCPInfo
DeleteFileW
GetFileTime
GetUserDefaultLangID
GetUserDefaultLCID
CopyFileW
GetCurrentProcess
CreateThread
DeleteAtom
GetFileSize
GetOEMCP
Sleep
CreateProcessA
CreateThread
CopyFileW
GetCurrentProcessId
GetConsoleOutputCP
ExitThread
GetFileTime
GetConsoleMode
FindAtomA
GetCurrentProcess
GetCPInfo
DeleteFileW
GetFileSize
CreateProcessA
GetLastError
GetCurrentThreadId
CreateDirectoryA
DeleteFileA
GetCurrentProcessId
GlobalFree
ExitProcess
GetUserDefaultLangID
FindAtomA
GetFileTime
Sleep
DeleteAtom
GetLastError
GetCurrentThreadId
FindFirstFileA
CreateThread
CopyFileW
FindFirstFileA
GetStdHandle
GetUserDefaultLangID
CreateDirectoryA
ExitProcess
ExitThread
CreateProcessA
DeleteFileW
GetLastError
Sleep
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
DeleteAtom
GetCurrentProcessId
GetFileSize
GetConsoleMode
GetComputerNameA
GetCommandLineA
FindAtomA
GetConsoleOutputCP
DeleteFileW
GetStdHandle
OpenFile
CreateProcessA
CreateDirectoryA

advapi32

RegEnumKeyW
RegQueryInfoKeyA
RegReplaceKeyW
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueA
RegFlushKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegLoadKeyA
RegOpenKeyExA
RegLoadKeyW
RegDeleteValueW
RegQueryValueW
RegQueryValueW
RegLoadKeyA
RegQueryValueExW
RegOpenKeyW
RegEnumValueW
RegQueryInfoKeyW
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegReplaceKeyA
RegQueryValueA
RegReplaceKeyW
RegGetKeySecurity
RegOpenKeyExW
RegFlushKey
RegQueryInfoKeyW
RegDeleteKeyA
RegQueryInfoKeyA
RegGetKeySecurity
RegLoadKeyW
RegEnumValueW
RegOpenKeyA
RegDeleteValueA
RegEnumKeyExW
RegEnumValueA
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyA
RegQueryValueW
RegLoadKeyA
RegCreateKeyW
RegCreateKeyExA

Sections

.itext
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 103KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

945ef280205f339e1d68d867f2f75110

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.itext Size: 28KB - Virtual size: 28KB

.rdata Size: 5KB - Virtual size: 5KB

.bss Size: 103KB - Virtual size: 483KB

.idata Size: 4KB - Virtual size: 4KB

.itext
Size: 28KB - Virtual size: 28KB

.rdata
Size: 5KB - Virtual size: 5KB

.bss
Size: 103KB - Virtual size: 483KB

.idata
Size: 4KB - Virtual size: 4KB