1276c4653fc3b3d67cf3446ed77fa234_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1276c4653fc3b3d67cf3446ed77fa234_JaffaCakes118
Size

88KB
MD5

1276c4653fc3b3d67cf3446ed77fa234
SHA1

9cc88c3ccfe49788dce5297542e734c62c86fd1a
SHA256

06cb13f29cf71efddc6b85c7398df60d2f04895065f4335ccbeee3fda62ddbfc
SHA512

9884d2d57d230dcc518c83432b825086b9889bb150bd61b7fa2b30097e77e20869b98547bbcfe50fdfc219e0e3ea5602bff814ee70a6eec000094be3ee5932ab
SSDEEP

1536:AoQIKo6iHk1t7qaeJdb3rydGs+af7f6QEiRvbl9lE:ANIKUytWaKb33glbl4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1276c4653fc3b3d67cf3446ed77fa234_JaffaCakes118

Files

1276c4653fc3b3d67cf3446ed77fa234_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e31641bd43f93614381e0800122e642a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStringTypeA
GetCommandLineA
GlobalAlloc
GetCommandLineA
HeapAlloc
GetCommandLineA
ExitProcess
GetCommandLineA
GetModuleHandleA
GetCommandLineA
WideCharToMultiByte
GetCommandLineA
GetFileType
GetCommandLineA
FreeLibrary
GetCommandLineA
lstrcmpA
GetCommandLineA

user32

DialogBoxParamA
DrawTextW
IsWindow
InsertMenuA
CopyImage
LoadCursorA
AppendMenuW
LoadMenuA
EndDialog
GetWindowTextLengthA
CopyIcon
GetCursor
GetDlgItem
BlockInput
GetMenu
IsMenu
CopyRect
CloseWindow
GetFocus
GetWindowTextA
CreateIcon
GetDC
AlignRects
DialogBoxParamW
CalcMenuBar
DrawTextA
AppendMenuA
DrawIconEx
DrawIcon

advapi32

RegQueryValueA
RegOpenKeyW
RegQueryInfoKeyW
RegFlushKey
RegCreateKeyW
RegEnumKeyW
RegQueryInfoKeyA
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA
RegLoadKeyW
RegCreateKeyExW
RegReplaceKeyW
RegEnumValueW
RegGetKeySecurity
RegLoadKeyA
RegEnumKeyExA
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExA
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegCreateKeyExA
RegDeleteKeyA
RegReplaceKeyA
RegQueryInfoKeyW
RegFlushKey
RegEnumValueA
RegLoadKeyA
RegCreateKeyExA
RegReplaceKeyW
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyA
RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExA
RegQueryValueA
RegEnumKeyW
RegEnumKeyExW
RegLoadKeyW
RegOpenKeyExA
RegGetKeySecurity
RegOpenKeyW

Sections

.tedt
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edaaa
Size: 9KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 924B

IMAGE_SCN_MEM_READ

.raac
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e31641bd43f93614381e0800122e642a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.tedt Size: 18KB - Virtual size: 18KB

.rdata Size: 47KB - Virtual size: 46KB

.edaaa Size: 9KB - Virtual size: 35KB

.bss Size: - Virtual size: 924B

.raac Size: 8KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 4KB

.tedt
Size: 18KB - Virtual size: 18KB

.rdata
Size: 47KB - Virtual size: 46KB

.edaaa
Size: 9KB - Virtual size: 35KB

.bss
Size: - Virtual size: 924B

.raac
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 4KB