2e31edef80fd73dc53c11d402e2fdd70_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e31edef80fd73dc53c11d402e2fdd70_JaffaCakes118
Size

58KB
MD5

2e31edef80fd73dc53c11d402e2fdd70
SHA1

00d58fa5271d0476194312e8bf43ce17c534bf20
SHA256

01bdd3896a1fb3030bb2ad27933fee71566c76e1164bdd1dae8cb2e8bfe74ca1
SHA512

6bcf0c75a6e9984ddfa8bc2adfb89b4f157c84c69f0be575caa8ee216c27e5631a996fc0bdf6f8a7b4edb57462f93b5772141ea27bd075439a30f19af406b661
SSDEEP

768:mkJ+4pg6lAKXSFXwRKP2tVwn8oKKIUVhkjupLvsM6LIqxB7gChNp:mYw6mK2Tawn89XUiSLmIqxCCJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e31edef80fd73dc53c11d402e2fdd70_JaffaCakes118

Files

2e31edef80fd73dc53c11d402e2fdd70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17241642807bc8532236330b772fc604

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegGetKeySecurity
RegEnumKeyW
RegReplaceKeyW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueW
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegQueryValueExW
RegLoadKeyW
RegCreateKeyW
RegDeleteValueA
RegLoadKeyA
RegQueryInfoKeyW
RegEnumValueW
RegFlushKey
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegQueryInfoKeyA
RegOpenKeyA
RegCreateKeyExW
RegReplaceKeyA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegFlushKey
RegLoadKeyW
RegReplaceKeyW
RegQueryValueExW
RegOpenKeyA
RegCreateKeyW
RegOpenKeyExA
RegQueryValueA
RegLoadKeyA
RegCreateKeyExW
RegReplaceKeyA
RegGetKeySecurity
RegOpenKeyExW
RegEnumKeyA
RegDeleteValueW
RegQueryValueW
RegEnumKeyExW
RegOpenKeyW
RegDeleteKeyW
RegCreateKeyExA
RegEnumValueW
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegEnumKeyW

kernel32

GetCommandLineA
WideCharToMultiByte
GetCommandLineA
GetLastError
GetCommandLineA
lstrcpynA
GetCommandLineA
GetModuleHandleA
GetCommandLineA
GetCPInfo
GetCommandLineA
GetDateFormatA
GetCommandLineA
Sleep
GetCommandLineA
lstrcmpiA
GetCommandLineA
GetLastError
GetCommandLineA
GlobalAlloc

user32

CopyIcon
IsWindow
GetFocus
DrawIconEx
DrawIcon
AppendMenuW
GetDC
DrawTextA
LoadMenuA
GetMenu
DialogBoxParamW
CalcMenuBar
DrawTextW
LoadCursorA
CopyRect
AppendMenuA
GetDlgItem
CloseWindow
GetCursor
CopyImage
DialogBoxParamA
InsertMenuA
EndDialog
BlockInput
GetWindowTextA
CreateIcon
IsMenu
AlignRects
GetWindowTextLengthA
IsWindow
DialogBoxParamW
GetCursor
EndDialog
DialogBoxParamA
CloseWindow
LoadMenuA
GetDlgItem
CopyIcon
DrawIconEx
LoadCursorA
GetMenu
GetWindowTextA
GetFocus
DrawTextW
CreateIcon
CopyImage
GetWindowTextLengthA
DrawIcon
GetDC
CopyRect
AppendMenuA
CalcMenuBar
BlockInput
AlignRects
DrawTextA
AppendMenuW
InsertMenuA
IsMenu

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.r72ta
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17241642807bc8532236330b772fc604

Headers

File Characteristics

Imports

advapi32

kernel32

user32

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 30KB - Virtual size: 29KB

.r72ta Size: 9KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 30KB - Virtual size: 29KB

.r72ta
Size: 9KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 4KB