403b293ebcc121e07c155fe958e828c2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

403b293ebcc121e07c155fe958e828c2_JaffaCakes118
Size

72KB
MD5

403b293ebcc121e07c155fe958e828c2
SHA1

ab68f595332ebdac936b913478f34200ae7f405c
SHA256

02d59702716a4204092b18f4a1c2bb16710e3b1d264f7d284579d28bc81a869b
SHA512

94e2b9e609bc9142f38a06d3bf9da2c2d1c5c21e41636a6fd903ef585b0f91f28022c2a6886942b185b3f35fe97b29df862f7749a2c1e6f51f515ddaf75031a1
SSDEEP

768:EtyqohSSRFUsAE8yT5hJuFrMt3f5jjXoxV938sdXzxn81XgX/GPiLu/T7GTmX:Etyqoh0yTnkov5foxV9FX4XgX/Gp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
403b293ebcc121e07c155fe958e828c2_JaffaCakes118

Files

403b293ebcc121e07c155fe958e828c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25fabcc630dcaf798b12d0486dfe9a5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrTrimA

kernel32

Sleep
GlobalAlloc
GetVersionExA
GetModuleFileNameA
SetFileAttributesA
lstrlenA
TerminateProcess
GetExitCodeProcess
SetProcessPriorityBoost
ExitThread
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
CloseHandle
GetSystemDirectoryA
GetTickCount
SetThreadPriority
GetStartupInfoA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
HeapFree
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
HeapAlloc
ExitProcess
InterlockedDecrement
InterlockedIncrement
CreateDirectoryA
RtlUnwind
GetModuleHandleA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetCPInfo
SetFilePointer

user32

LoadStringA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA

shell32

ShellExecuteExA
SHChangeNotify
SHFileOperationA
ShellExecuteA

rasapi32

RasEnumDevicesA
RasEnumConnectionsA
RasGetEntryPropertiesA
RasHangUpA
RasSetEntryPropertiesA
RasDialA
RasGetErrorStringA
RasDeleteEntryA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25fabcc630dcaf798b12d0486dfe9a5b

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

shell32

rasapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 15KB

.rsrc Size: 28KB - Virtual size: 27KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 15KB

.rsrc
Size: 28KB - Virtual size: 27KB