3b52c4cf55f591f06b6742962e579f02_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b52c4cf55f591f06b6742962e579f02_JaffaCakes118
Size

162KB
MD5

3b52c4cf55f591f06b6742962e579f02
SHA1

ef13df8dfed3100e78e5cb6f317902d48c4b77ad
SHA256

e43954aad8e699345f64ff48fbda64d6e310e5d4c680d0ceaa6569e0750825b8
SHA512

d8c6dc0c3ba8846a9be5a3f8b3dd907af56267b68087ff23effacd9aedb1cf6fcb622e6b0bdf335bcacb92340fde7b5cf9db0e1b2689afbe80d8361c4623088e
SSDEEP

3072:z2f3YKdT0n5DSW22KnfY1vD1oSiX9uihyAHDMLG2eq4F+DvNgp3WNt6ee/q8:zc3YQT0IWefGvpeML9efUq3/eE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b52c4cf55f591f06b6742962e579f02_JaffaCakes118

Files

3b52c4cf55f591f06b6742962e579f02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d34db192d61854171ec82e230324811

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExW
SetFilePointerEx
GetSystemTimeAsFileTime
CompareStringW
FindFirstFileA
ExpandEnvironmentStringsW
SystemTimeToFileTime
GetSystemTime
SetFileTime
SetEndOfFile
WriteFile
LocalFree
lstrlenA
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetFileSizeEx
FindClose
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GlobalFree
GlobalAlloc
GetFileAttributesExW
CopyFileW
CreateHardLinkW
SetFileAttributesW
DeleteFileW
GetTempPathA
GetFileTime
FindNextFileW
GetStdHandle
GetCurrentThread
RemoveDirectoryW
FormatMessageA
GetComputerNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
HeapReAlloc
RtlUnwind
GetLocaleInfoA
HeapSize
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

user32

PeekMessageW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

ole32

StgOpenStorageEx

oleaut32

GetActiveObject
SafeArrayGetRecordInfo
VarUI1FromDec
VariantInit

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d34db192d61854171ec82e230324811

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 119KB - Virtual size: 118KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 38KB - Virtual size: 37KB

.reloc Size: 512B - Virtual size: 300B

.text
Size: 119KB - Virtual size: 118KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 38KB - Virtual size: 37KB

.reloc
Size: 512B - Virtual size: 300B