42802871bcdd178df950924b2dd02ad6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42802871bcdd178df950924b2dd02ad6_JaffaCakes118
Size

43KB
MD5

42802871bcdd178df950924b2dd02ad6
SHA1

a70391c05c5f2d570c991af0a83f64fb6c2fbfb8
SHA256

c5e8fdc3753d60bc175d2b465bc6778bc90712b86097234b8167e5993bc05abb
SHA512

6d299c82f173c7fd09d9809e59b14d925778ab7d1ddaffc18e5968a08771fef0c21e04a0631ea34a487d918a8a506d7e61f315da29b675235b2e9a21b0867af6
SSDEEP

768:1BjFPHZtpd8aKLieyRQpu73wa/cc/AbAMrbCY7ds8ZrhbYOcdO6+Cqg:13VjT00XIbAMrb7dRZ9bodn+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42802871bcdd178df950924b2dd02ad6_JaffaCakes118

Files

42802871bcdd178df950924b2dd02ad6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b999ce73c5b6282073597c53c0f0938a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrentThreadId
GetCommandLineW
GetOEMCP
GetTickCount
FreeEnvironmentStringsW
GetModuleHandleA
GetLastError
SetUnhandledExceptionFilter
CreateFileMappingW
IsValidCodePage
GetFileAttributesA
GetCurrentProcess
lstrlenW
GetSystemTimeAsFileTime
InitializeCriticalSection
OutputDebugStringW
GetCurrentProcessId
GetStartupInfoA
CloseHandle
FileTimeToSystemTime
GetProcessHeap
GetTimeZoneInformation
SetStdHandle
IsDebuggerPresent
GetSystemInfo
VirtualProtect
SetConsoleCP
WriteFile
GetCommandLineA
QueryPerformanceCounter
InterlockedExchange
GetDateFormatA
GetFileSize
TerminateProcess
SetEvent
VirtualAlloc
LocalReAlloc
HeapAlloc
GetACP
FindFirstFileA
ExitProcess
WideCharToMultiByte
GetVersion
UnmapViewOfFile
GetLocalTime
lstrcmpiA
FileTimeToLocalFileTime
GlobalUnlock
GetConsoleOutputCP
GetFileAttributesW
VirtualFree
LoadLibraryA
SetHandleCount
GetModuleFileNameW

ole32

CoMarshalHresult
CoTaskMemAlloc
CreateStreamOnHGlobal

lz32

LZDone

user32

GetWindowRect
GetWindowTextW
SetWindowLongA
RemoveMenu
ShowWindow
DialogBoxParamW
GetFocus
MapWindowPoints
SendMessageW
SetWindowTextW

msvcrt

_errno
_exit
??0exception@@QAE@ABV0@@Z

advapi32

EqualSid
RegQueryValueExA
RegDeleteValueW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b999ce73c5b6282073597c53c0f0938a

Headers

File Characteristics

Imports

kernel32

ole32

lz32

user32

msvcrt

advapi32

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 35KB - Virtual size: 49KB

.idata Size: 512B - Virtual size: 21KB

.reloc Size: 512B - Virtual size: 324B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 35KB - Virtual size: 49KB

.idata
Size: 512B - Virtual size: 21KB

.reloc
Size: 512B - Virtual size: 324B