12ed934b88c4f3e3b5479544d0dc689a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

12ed934b88c4f3e3b5479544d0dc689a_JaffaCakes118
Size

162KB
MD5

12ed934b88c4f3e3b5479544d0dc689a
SHA1

d82aab466601cd22702cc113cc8cd876bb1b420a
SHA256

b2da606ae7be840fd3846a762e6ce7dd92d1369f7cc5ec68eedef1272b9d8414
SHA512

218fddfcb97e574509a4c9e5de1fb3d1cbd8a151d3157de53ecb104fa8c85a51fd049565f5e0ef44759960b67ebac8e97d613ccc0fdf7f8a56550b65a0c83ed8
SSDEEP

3072:PDefSklsMZBoPnFPaguIv30iqodAZbLTX/T6up+Pmm0FgRHmGj50ekQekR:7efLsMZePnFIIv30ixdEn/HpmzU40QeI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12ed934b88c4f3e3b5479544d0dc689a_JaffaCakes118

Files

12ed934b88c4f3e3b5479544d0dc689a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02c7b59eca937b6f2d5dde3261903654

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
WriteFile
FindNextFileA
LocalAlloc
WritePrivateProfileStringA
GetPrivateProfileIntA
LocalFree
FreeResource
IsDBCSLeadByte
GetSystemInfo
RemoveDirectoryA
GlobalAlloc
UnhandledExceptionFilter
TerminateThread
SetFileAttributesA
GetTempFileNameA
FindResourceA
FindFirstFileA
lstrcmpA
GlobalUnlock
GetModuleFileNameW
lstrcpyA
GetTempPathA
GlobalLock
GetShortPathNameA
ExpandEnvironmentStringsA
_lclose
lstrlenA
GetCurrentProcess
GetModuleFileNameA
GetDriveTypeA
LoadLibraryExA
_llseek
SetEvent
SetFilePointer
GetVersionExA
EnumResourceLanguagesA
FreeLibrary
SizeofResource
ReadFile
GetFileAttributesA
GetModuleHandleA
LocalFileTimeToFileTime
GetCommandLineA
ExitProcess
LockResource
SetCurrentDirectoryA
SetFileTime
_lopen
CreateFileA
lstrcmpiA
GetSystemDirectoryA
GetPrivateProfileStringA
FormatMessageA
IsBadStringPtrW
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
GetLastError
lstrcpynA
CreateMutexA
LoadResource
GetVolumeInformationA
SetUnhandledExceptionFilter
GlobalFree
ResetEvent
GetStartupInfoA
GetDiskFreeSpaceA
MapViewOfFile
CreateEventA
DeleteFileA
GetWindowsDirectoryA
lstrcatA
FindClose
GlobalSize
GetCurrentDirectoryA

wintrust

WinVerifyTrust

gdiplus

GdipTranslateRegion
GdipSaveImageToFile
GdipDeleteRegion
GdipCreateRegionRect
GdipDrawLineI
GdipFillRegion

advapi32

FreeSid
RegQueryValueExA
RegOpenKeyExA
EqualSid
AdjustTokenPrivileges
AllocateAndInitializeSid
RegSetValueExA
OpenProcessToken
RegCloseKey
RegDeleteValueA
GetTokenInformation
RegCreateKeyExA
LookupPrivilegeValueA
RegQueryInfoKeyA

ole32

StgIsStorageILockBytes
OleFlushClipboard
OleIsCurrentClipboard
OleDuplicateData
DoDragDrop
RegisterDragDrop
RevokeDragDrop

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02c7b59eca937b6f2d5dde3261903654

Headers

File Characteristics

Imports

kernel32

wintrust

gdiplus

advapi32

ole32

version

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 6KB - Virtual size: 9KB

.rsrc Size: 3KB - Virtual size: 3KB

.rdata Size: 141KB - Virtual size: 159KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 6KB - Virtual size: 9KB

.rsrc
Size: 3KB - Virtual size: 3KB

.rdata
Size: 141KB - Virtual size: 159KB