42a4095e348053cd2cd5716470f9ad42_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42a4095e348053cd2cd5716470f9ad42_JaffaCakes118
Size

176KB
MD5

42a4095e348053cd2cd5716470f9ad42
SHA1

537a0e89790a2be1f7c8eb88b1fe648c4fe2f137
SHA256

7e4cd71b93beffe8c806788879bccebfe09a49f95546f92f4dc37dfd6582a2c7
SHA512

3544363bac6968b25a2d719391e5d12f23affee78e4a3dbddb450a284d669b37c59299c674873d8873da74f7f4b00b2bca616daefca79ec72f5bbb99d98bdd96
SSDEEP

3072:ZHoI8+WdjePaA1q1WMC0XWuUKXK+kW3wVaY+Z4XFc5zItnwog:BoI8BYaA1qv3mB9vJZ0inLg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a4095e348053cd2cd5716470f9ad42_JaffaCakes118

Files

42a4095e348053cd2cd5716470f9ad42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2bb6145e9c48d1795306008d1fb987e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClassLongA
MessageBoxW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

kernel32

Sleep
InitializeCriticalSection
GetCurrentProcessId
HeapSize
WriteConsoleA
GetStringTypeA
IsValidCodePage
GetFileType
TlsSetValue
GetTickCount
GetCurrentThreadId
HeapAlloc
GetProcessHeap
LCMapStringA
GetThreadPriority
GetConsoleCP
GetFullPathNameW
GetACP
SetCommTimeouts
CloseHandle
QueryPerformanceCounter
GetEnvironmentStrings
WideCharToMultiByte
CreateFileA
GetEnvironmentStringsW
GetProcAddress
GetConsoleOutputCP
VirtualFree
GetLocaleInfoA
GetCurrentDirectoryW
HeapDestroy
LCMapStringW
GetLastError
SetLastError
RaiseException
TlsFree
MultiByteToWideChar
EnumResourceNamesA
FreeEnvironmentStringsA
VirtualAlloc
TlsGetValue
GlobalAlloc
GetModuleFileNameW
GetSystemTimeAsFileTime
InterlockedDecrement
HeapCreate
GetModuleHandleA
FreeEnvironmentStringsW
FlushFileBuffers
HeapFree
GetCommandLineA
GetUserDefaultLCID
LoadLibraryA
ExitProcess
ExitProcess
IsDebuggerPresent
GetModuleFileNameA
WriteFile
SetStdHandle
ReadFile
UnhandledExceptionFilter
DeleteCriticalSection
EnumSystemLocalesA
SetHandleCount
GetOEMCP
GetStdHandle
GetStringTypeW
EnterCriticalSection
TlsAlloc
SetFilePointer
SetUnhandledExceptionFilter
RtlUnwind
TerminateProcess
GetConsoleMode
InterlockedIncrement
SetEndOfFile
WriteConsoleW
HeapReAlloc
IsValidLocale
GetCPInfo
LeaveCriticalSection
GetCurrentProcess
GetVersionExA
GetLocaleInfoW
GetStartupInfoA
GetFullPathNameA

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

shlwapi

SHDeleteKeyW

ole32

CoCreateGuid
CoCreateInstance
CoUninitialize
StringFromGUID2
CoInitialize
CoSetProxyBlanket

rpcrt4

UuidCreate

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bb6145e9c48d1795306008d1fb987e0

Headers

File Characteristics

Imports

user32

shell32

kernel32

advapi32

shlwapi

ole32

rpcrt4

Sections

.text Size: 149KB - Virtual size: 148KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 22KB

.crt Size: 512B - Virtual size: 212KB

.text
Size: 149KB - Virtual size: 148KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 22KB

.crt
Size: 512B - Virtual size: 212KB