4528ec2b459b47b288ce66f6c15bc78c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4528ec2b459b47b288ce66f6c15bc78c_JaffaCakes118
Size

180KB
MD5

4528ec2b459b47b288ce66f6c15bc78c
SHA1

40292a90d5853159310c26267cc746d9cb5cfff2
SHA256

681886bd0fcfa7dccb6fb8689060ebb3bbe3cbba684ef28e00d77f1c74ed7a96
SHA512

bb686bc76367da2b8fd58920d4d6d9710e6cdc8edde774361e9917471d930fc3918695be8d868fb41b813e70b1e98d3290ca4a6f4b5a0f140af4d5a71088b608
SSDEEP

3072:XrcsFYEkOsqvbTHWtv8wWce2w2dReq8xt9PAD+LdpcVlGTj8odOgWnMXUediA:VFYEp1fHWt0wWcq2dGnPjLr+lGTj8gOo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4528ec2b459b47b288ce66f6c15bc78c_JaffaCakes118

Files

4528ec2b459b47b288ce66f6c15bc78c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3dd47681d5bc9641ea4d9694dd244c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

IsEqualGUID

kernel32

MulDiv
lstrcmpA
CloseHandle
GlobalHandle
LockResource
HeapFree
LocalFree
MultiByteToWideChar
GetLocaleInfoA
GetSystemDirectoryA
GetPrivateProfileStringA
HeapAlloc
GetDiskFreeSpaceA
LoadResource
TlsSetValue
InterlockedIncrement
SetThreadLocale
GetLocalTime
GetVersionExA
GetProcessHeap
VirtualAlloc
LeaveCriticalSection
TlsFree
GetSystemInfo
InterlockedDecrement
ExitProcess
GetCommandLineA
DeleteFileA
SizeofResource
GlobalReAlloc
lstrlenA
SetErrorMode
LocalAlloc
GetModuleHandleA
LoadLibraryExA
GlobalLock
RaiseException
FreeLibrary
TlsGetValue
WriteFile
SetEvent
TlsAlloc
GlobalAddAtomA
FindResourceA
GetThreadLocale
GetCPInfo
GetOEMCP
CreateFileA
GlobalAlloc
VirtualFree
EnterCriticalSection
GlobalUnlock
CompareStringA
GetACP
GetStringTypeW
CreateThread
CreateEventA
FindClose
WinExec
FindFirstFileA
UnhandledExceptionFilter
GetFileType
SetLastError
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
GetCurrentThreadId
GetEnvironmentStringsA
GlobalFree
WaitForSingleObject
lstrcpynA
SetEndOfFile
RtlUnwind
FormatMessageA
VirtualQuery
GetStartupInfoA
GlobalDeleteAtom
GetModuleFileNameA
WideCharToMultiByte
SetHandleCount
SetConsoleCtrlHandler
GetVersion
GetStdHandle
GetProcAddress
SetFilePointer
lstrcpyA
GetLastError
GetWindowsDirectoryA
GetFileSize
EnumCalendarInfoA
ReadFile
LoadLibraryA

advapi32

OpenProcessToken
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
AdjustTokenPrivileges
RegOpenKeyA
RegCloseKey
LookupPrivilegeValueA

oleaut32

SysAllocStringLen
VariantClear
VariantChangeTypeEx
SysFreeString
VariantCopyInd
SysReAllocStringLen
SysStringLen

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3dd47681d5bc9641ea4d9694dd244c9

Headers

File Characteristics

Imports

ole32

kernel32

advapi32

oleaut32

Sections

.text Size: 156KB - Virtual size: 154KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 156KB - Virtual size: 154KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 3KB