36a11125be935db67ef64a4f85ab1497_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

36a11125be935db67ef64a4f85ab1497_JaffaCakes118
Size

401KB
MD5

36a11125be935db67ef64a4f85ab1497
SHA1

fa0cb299b2c0de53a57ca01c96e3772902a0e443
SHA256

7063c5585cc6ac9ba1b6dc29f1b845bac80bff7850b3aaa9c4318046ff5e30ef
SHA512

4d34c54896f01a3509d6afe582d06cd85b6a6139602b0f4d3480836d871995fb6c728f1eda9e4732cc30c838371b04d2857641a5a036713341be7226bb0890f4
SSDEEP

12288:L6IdPhjlG2OGrDvj01HJ0WI8uAJUT5V4SUMK:LNZjo2OGr01HJ0pAJUT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36a11125be935db67ef64a4f85ab1497_JaffaCakes118

Files

36a11125be935db67ef64a4f85ab1497_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7f805d9b8e46eafa0a7809f1cd5873e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DispatchMessageA
RegisterWindowMessageA
CallMsgFilterW
wsprintfA
CharNextA
TranslateMessage

advapi32

RevertToSelf
RegNotifyChangeKeyValue
RegEnumValueA
RegOpenKeyExA
OpenThreadToken
RegSetValueExA
RegQueryInfoKeyA
RegCloseKey
RegEnumKeyExA
ImpersonateLoggedOnUser
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA

kernel32

ExitProcess
VirtualAlloc

wininet

InternetCrackUrlA
InternetCombineUrlA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

urlmon

UrlMkSetSessionOption
CoInternetGetSession
CoInternetParseUrl
CopyBindInfo

azroles

AzCloseHandle

cfgmgr32

CM_Get_Version_Ex

shlwapi

StrCatBuffW

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7f805d9b8e46eafa0a7809f1cd5873e

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

kernel32

wininet

version

urlmon

azroles

cfgmgr32

shlwapi

Sections

.text Size: 172KB - Virtual size: 171KB

.data Size: 34KB - Virtual size: 2.4MB

.rdata Size: 103KB - Virtual size: 102KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 28B

.rsrc Size: 89KB - Virtual size: 88KB

.text
Size: 172KB - Virtual size: 171KB

.data
Size: 34KB - Virtual size: 2.4MB

.rdata
Size: 103KB - Virtual size: 102KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 28B

.rsrc
Size: 89KB - Virtual size: 88KB