257199a826fc7f0acdbdd9cb708ab135_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

257199a826fc7f0acdbdd9cb708ab135_JaffaCakes118
Size

647KB
MD5

257199a826fc7f0acdbdd9cb708ab135
SHA1

7e3370c999f9fc464a9787470f23ca2f7c3af5d1
SHA256

b7e2543439876ed67b217afd79b72d49129f03b86d3e44fca7ff24984b8209c7
SHA512

585655034d36aaf79e1cc3b24562902f30a0d6456526dbbc8dd8df0c26f3f84518ce4c246d2b310c1f40c09d2448a9845738810eaa4093690ece32268b55d054
SSDEEP

12288:DpWZWy0++Q//s8A/8A/8Ay5pi5pi5pJNJJTDEEr2k2k2i55V66addzmOmOml336v:DpDy+ppqeeH+dd3660mmRhS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257199a826fc7f0acdbdd9cb708ab135_JaffaCakes118

Files

257199a826fc7f0acdbdd9cb708ab135_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc25ec2846faa71222ce491d29ddec0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
WaitForSingleObject
ReleaseMutex
GetExitCodeProcess
OpenProcess
MapViewOfFile
CreateFileMappingA
CreateMutexA
DuplicateHandle
GetCurrentProcess
UnmapViewOfFile
lstrcpyA
GetFileSize
CreateFileA
GetModuleFileNameA
ExitProcess
WriteFile
FreeLibrary
SetThreadContext
VirtualProtectEx
WriteProcessMemory
GetThreadContext
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
SetEndOfFile
GetTempFileNameA
GetTempPathA
SetFilePointer
FlushFileBuffers
SetStdHandle
CreateProcessA
ResumeThread
Sleep
DeleteFileA
CloseHandle
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
RtlUnwind
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapReAlloc
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetLastError
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter

user32

MessageBoxA
wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shlwapi

PathAddBackslashA
PathFileExistsA
PathIsDirectoryA
PathRemoveFileSpecA

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc25ec2846faa71222ce491d29ddec0c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 2KB - Virtual size: 2KB