3a32751f4500e8bd9a95ab37014bce49_JaffaCakes118

General

Target

3a32751f4500e8bd9a95ab37014bce49_JaffaCakes118
Size

178KB
MD5

3a32751f4500e8bd9a95ab37014bce49
SHA1

ca72eaa235dc355134cdc9fcedc353fda5738efa
SHA256

a4bef54f75c177491fb1bfd07a2d253ea823dac806321e52dc1ffc2a6bc207aa
SHA512

f4cf37a8380e334387d3cbdcc519c1336bdc0c0fe3997b14fda46a96107499d9cecb6a62b03aeccccf5b79d986084c3a2cb988a03a0f77a599b0d59184064451
SSDEEP

3072:SVqkSAXCaCCIg6+LGaxh9x7g429zJ6pVC3VUPiX8chwjXTf1/9On53g7:wq4CaD6+LGaxDxsh9bFUPisxj/On5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a32751f4500e8bd9a95ab37014bce49_JaffaCakes118

Files

3a32751f4500e8bd9a95ab37014bce49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19b223f73cd1bc174124f0e40077de95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
InterlockedIncrement
GetModuleHandleA
MultiByteToWideChar
GetThreadLocale
GetShortPathNameA
CloseHandle
QueryPerformanceCounter
IsBadWritePtr
LeaveCriticalSection
GetLastError
InitializeCriticalSection
GetProcessHandleCount
GetSystemTimeAsFileTime
EnterCriticalSection
WideCharToMultiByte
LoadLibraryA
UnhandledExceptionFilter
CreateFileA
GetACP
SetUnhandledExceptionFilter
LocalFree
EnumResourceTypesA
DeleteCriticalSection
ExitProcess
InterlockedDecrement
GetFileAttributesA
GetCurrentThreadId
IsBadReadPtr
FreeLibrary
InterlockedExchange
GetCurrentProcessId
lstrlenW
GetProcAddress
GetLocaleInfoA
GetTickCount
IsDebuggerPresent
GetVersionExA

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA

advapi32

RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegSetValueExA

ole32

StgCreateDocfile
StgOpenStorage

shell32

SHGetSpecialFolderPathA

user32

wsprintfA
wsprintfW

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19b223f73cd1bc174124f0e40077de95

Headers

File Characteristics

Imports

kernel32

setupapi

advapi32

ole32

shell32

user32

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: 75KB - Virtual size: 74KB

.edata Size: 1024B - Virtual size: 248KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: 75KB - Virtual size: 74KB

.edata
Size: 1024B - Virtual size: 248KB