25bc430e0c815f153a2be1804732d773_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

25bc430e0c815f153a2be1804732d773_JaffaCakes118
Size

96KB
MD5

25bc430e0c815f153a2be1804732d773
SHA1

76bc872505a47ad4be642a19fdaa9a59a298314d
SHA256

dadbc49c15c88fa0035a902e055edb19240ad4134302b427cc08290cfe60caac
SHA512

dc844f4b389903e4dbaa2c9f5ef554a3f69c3467603ff7199df465fc35205a0e145d8b0d0e61dfc5483c290efba6efae73a0499c0d7c63e08f2f9b7299e4854a
SSDEEP

1536:f7smjANXfXonpvWxwPAeWw9BkMQaDbcdw4LrLXzJ/UcMxdWXLrMw9ZkQB6QIkgmw:fImjConp+2PbDlQ6cd9LXzJ/Ug7gQkLo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25bc430e0c815f153a2be1804732d773_JaffaCakes118

Files

25bc430e0c815f153a2be1804732d773_JaffaCakes118
.exe windows:5 windows x86 arch:x86

320ca46711a6037a32d1bc3d6c618dd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegReplaceKeyA
RegDeleteKeyW
RegOpenKeyA
RegEnumKeyW
RegLoadKeyW
RegReplaceKeyW
RegEnumKeyA
RegEnumKeyExA
RegCreateKeyExW
RegEnumKeyExW
RegLoadKeyA
RegOpenKeyW
RegFlushKey
RegDeleteKeyA
RegQueryValueExW
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyW
RegReplaceKeyW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteKeyA
RegOpenKeyExA
RegLoadKeyW
RegReplaceKeyA
RegLoadKeyA
RegOpenKeyW
RegQueryInfoKeyA
RegDeleteValueW
RegCreateKeyExA
RegCreateKeyExW

kernel32

CopyFileA
GetStdHandle
ExitProcess
GetFileTime
CopyFileExW
GlobalFree
DeleteAtom
FindAtomW
GetLocalTime
ExitThread
FlushFileBuffers
OpenFile
OpenFileMappingA
GetLastError
GetCPInfo
FindClose
GetPriorityClass
FindAtomA
GetLocalTime
DeleteFileA
FindClose
CopyFileA
WriteFile
GetFileType
FreeResource
FindAtomA
FindAtomW
CopyFileExA
FlushFileBuffers
AddAtomA
OpenFileMappingA
ExitThread
ReadFile
GetCPInfo
WriteFile
GetStdHandle
GetCommandLineA
GetPriorityClass
GetFileTime
OpenFile
FreeResource
DeleteFileA
CopyFileExA
FlushFileBuffers
AddAtomW
GetFileType
DeleteAtom
FatalExit
FindAtomW
GetFileType
DeleteFileA
FreeResource
AddAtomW
GetFileTime
FatalExit
GetPriorityClass
GetCommandLineA
ReadFile
GetCPInfo
OpenFile
GetStdHandle
GlobalFree
CopyFileExW
OpenFileMappingA
CreateDirectoryA
CopyFileA
DeleteFileW
DeleteAtom
GetLastError
ExitThread
FindClose
ExitProcess
WriteFile
ReadFile
GetLastError
FindClose
DeleteAtom
GetLocalTime
FreeResource
FatalExit
GetPriorityClass
GetCommandLineA
FindAtomW
FindAtomA
AddAtomW
AddAtomA
ReadFile
GetFileTime
GetStdHandle
GetFileType
GetCommandLineA
OpenFileMappingA
DeleteAtom
CopyFileExA
CopyFileExW
GetCPInfo
DeleteFileA
CopyFileA
FatalExit
OpenFile
ExitProcess
GetPriorityClass
FindClose
CopyFileA
FlushFileBuffers
WriteFile
CopyFileExA
ReadFile
DeleteFileW
GetLastError
ExitThread
GetCPInfo
GetFileType
AddAtomW
ExitProcess
DeleteAtom
GlobalFree
GetLastError
GetPriorityClass
GetCommandLineA
FreeResource
ExitThread
FindAtomW
GlobalFree
WriteFile
AddAtomW
AddAtomA
CopyFileA
GetLocalTime
FindAtomA
OpenFileMappingA
OpenFile
CopyFileExA
CreateDirectoryA
FindClose
GetCPInfo
WriteFile
FlushFileBuffers
CopyFileExW
FreeResource
FatalExit
FindAtomW
GetFileType
OpenFileMappingA
GetPriorityClass
DeleteFileA
ExitProcess
ExitThread
AddAtomA
GetFileTime
FindClose
GetPriorityClass
CopyFileA
GetCPInfo
OpenFile
GetLocalTime
AddAtomA
ExitThread
FatalExit
CopyFileExW
FindClose
DeleteAtom
WriteFile
CopyFileExA
AddAtomW
GetFileTime
GetStdHandle
GetFileType
ExitProcess
FindAtomW
ReadFile
AddAtomA
FatalExit
AddAtomW
DeleteAtom
GetFileTime
OpenFile
CopyFileExW
DeleteFileA
ExitThread
GetStdHandle
GlobalFree
DeleteFileW
OpenFileMappingA
ReadFile
DeleteAtom
FindAtomW
FindAtomA
GetLastError
OpenFileMappingA
GetPriorityClass
FatalExit
FlushFileBuffers
CopyFileA
GetFileType
FreeResource
WriteFile
CopyFileExA
GetCommandLineA
DeleteFileW
AddAtomA
FindAtomA
CopyFileA
GetLocalTime
CopyFileExW
GetPriorityClass
FindClose
GetLastError
GetStdHandle
ExitThread
FatalExit
DeleteFileA
AddAtomW
DeleteAtom

user32

AppendMenuA
DrawIconEx
CalcMenuBar
EndDialog
GetMenu
CopyRect
GetCursor
BeginPaint
CopyIcon
BlockInput
InsertMenuA
CopyImage
DialogBoxParamA
LoadCursorA
LoadMenuA
InsertMenuA
IsMenu
GetDlgItem
EndDialog
CopyRect
IsWindow
BeginPaint
GetFocus
AlignRects
GetDC
CreateIcon
DrawIconEx
AppendMenuW
AppendMenuA
LoadCursorA
CalcMenuBar
CopyImage
DrawIcon
GetWindowTextLengthA
BlockInput
CopyRect
LoadMenuA
DrawIcon
EndDialog
InsertMenuA
GetDlgItem
AppendMenuA
DrawTextA
CalcMenuBar
GetDC
IsWindow
CloseWindow
AlignRects
GetWindowTextLengthA
DrawIconEx
CopyImage
GetCursor
DialogBoxParamA
GetWindowTextLengthA
DrawIconEx
DrawTextA
LoadMenuA
CopyIcon
AlignRects
IsWindow
DialogBoxParamW
CreateIcon
CloseWindow
InsertMenuA
GetDlgItem
DialogBoxParamA
DrawTextW
IsMenu

Sections

.b92af
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.43e60
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1hga3
Size: 42KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.59ed
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 719B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

320ca46711a6037a32d1bc3d6c618dd1

Headers

File Characteristics

Imports

advapi32

kernel32

user32

Sections

.b92af Size: 31KB - Virtual size: 31KB

.43e60 Size: 12KB - Virtual size: 11KB

.1hga3 Size: 42KB - Virtual size: 365KB

.59ed Size: 8KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 719B

.b92af
Size: 31KB - Virtual size: 31KB

.43e60
Size: 12KB - Virtual size: 11KB

.1hga3
Size: 42KB - Virtual size: 365KB

.59ed
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 719B