2b19f48573743978e32025d0fed22ef4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2b19f48573743978e32025d0fed22ef4_JaffaCakes118
Size

57KB
MD5

2b19f48573743978e32025d0fed22ef4
SHA1

5f7580deac1456c30aa49b54da4c9e8bbe86f5b9
SHA256

6c47ee34fb2e176a2d299eff50c74a4ef4a686b731117c6c6c74e75353ec33ea
SHA512

8f368cadac556c57896d9f5e96853baad23509d4068f8c68852e91ae0177a91de77ff39869132365f419d6b5b19da6e468b548e4ebc772b8b24d0b2da4d711ee
SSDEEP

1536:egkkeZKyhH92mpeHEAg1LEtiPG3zVOjgc:hkkeZJhHgEvMiOgjgc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b19f48573743978e32025d0fed22ef4_JaffaCakes118

Files

2b19f48573743978e32025d0fed22ef4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

45b4ee65cb931b0b8de29c37a7ffcdad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHFileOperationA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetFileInfoA

advapi32

RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegEnumValueA
RegEnumKeyA
RegCreateKeyExA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

SetTimeZoneInformation
WriteFile
GetModuleHandleA
InterlockedExchange
GetThreadLocale
GetDiskFreeSpaceW
ReleaseSemaphore
CreateFileW
MapViewOfFile
FormatMessageA
SetHandleContext
SetInformationJobObject
GetTempFileNameW
GlobalMemoryStatusEx
GetStartupInfoA
GetStringTypeW
VirtualQuery
FreeLibrary
SetConsoleWindowInfo
GetProcessHeap
GetCurrentDirectoryW
WaitForSingleObject
CreateFileMappingA
LCMapStringW
GetStringTypeA
GetFileSize
SetFilePointer
CreateTimerQueue
ExitProcess
GetShortPathNameW
LCMapStringA
LocalFree
IsDebuggerPresent
CreateProcessW
CreateProcessA
HeapFree
GetLongPathNameW
HeapAlloc
FreeEnvironmentStringsW
ReadFile
CloseHandle
CreateFileA
LoadLibraryA
TermsrvAppInstallMode
GetTempPathA
SearchPathW
HeapReAlloc
GetTempPathW
GetCommandLineA
GetVersionExA
GetLogicalDriveStringsA
OpenThread
SetLastError
GetProcAddress

ole32

CreateDataAdviseHolder
CoQueryClientBlanket
CoLockObjectExternal
OleBuildVersion

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jtmfsx
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 129KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45b4ee65cb931b0b8de29c37a7ffcdad

Headers

File Characteristics

Imports

shell32

advapi32

version

kernel32

ole32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 9KB - Virtual size: 125KB

.jtmfsx Size: 3KB - Virtual size: 3KB

.edata Size: 129KB - Virtual size: 251KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 9KB - Virtual size: 125KB

.jtmfsx
Size: 3KB - Virtual size: 3KB

.edata
Size: 129KB - Virtual size: 251KB