92100b734649265df037b8a38f8cbaae_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

92100b734649265df037b8a38f8cbaae_JaffaCakes118
Size

193KB
MD5

92100b734649265df037b8a38f8cbaae
SHA1

a9edb8ac7bf958be459e42a153f58c36783fea84
SHA256

badb226b241d5ffa435042a8b72d452d167c3a2b4ac46e4cd10e38e709caf70a
SHA512

922130a816c4939be8be985bf41ecfb53f070e4a9a0bf5eb578e2b957ab9d14f5b9bc4940523cbd44b73e7d6e2bb846bf6997552430980d86f8cbdea28971d7a
SSDEEP

3072:RkgT1FVV5SDr7+L9DAXqSvbTzD1O0x3Qo9sZBokN08bLXCxqqif9WXdnzxBML18K:Ggp1Kz/xgokBljVJ0nHMBnoQA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92100b734649265df037b8a38f8cbaae_JaffaCakes118

Files

92100b734649265df037b8a38f8cbaae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39311d491d5ff058b4e856cef61ef76c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

shlwapi

SHDeleteKeyW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

kernel32

GetCurrentProcessId
GetCurrentDirectoryW
RtlUnwind
GetCommandLineA
HeapSize
SetStdHandle
LCMapStringA
CreateFileA
GetConsoleCP
InterlockedDecrement
VirtualAlloc
GetLocaleInfoW
SetHandleCount
GetThreadPriority
TerminateProcess
ReadFile
GetSystemTimeAsFileTime
DeleteCriticalSection
EnumSystemLocalesA
SetFilePointer
RaiseException
TlsAlloc
GetTickCount
HeapDestroy
WideCharToMultiByte
GlobalAlloc
InterlockedIncrement
SetCommTimeouts
GetConsoleMode
GetProcAddress
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleHandleA
WriteConsoleA
GetStdHandle
HeapFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
ExitProcess
EnumResourceNamesA
LoadLibraryA
GetEnvironmentStrings
GetStringTypeW
Sleep
TlsFree
TlsSetValue
GetLastError
GetModuleFileNameA
LCMapStringW
GetFullPathNameW
MultiByteToWideChar
SetLastError
GetUserDefaultLCID
HeapReAlloc
GetModuleFileNameW
ExitProcess
GetCurrentProcess
GetProcessHeap
LeaveCriticalSection
EnterCriticalSection
VirtualFree
GetCPInfo
FlushFileBuffers
GetLocaleInfoA
GetACP
GetVersionExA
GetStartupInfoA
IsValidLocale
TlsGetValue
GetConsoleOutputCP
GetCurrentThreadId
CloseHandle
GetOEMCP
UnhandledExceptionFilter
QueryPerformanceCounter
HeapCreate
SetEndOfFile
HeapAlloc
GetEnvironmentStringsW
GetFileType
GetStringTypeA
IsValidCodePage
WriteConsoleW
InitializeCriticalSection
WriteFile
GetFullPathNameA

user32

GetClassLongA
MessageBoxW

ole32

CoCreateGuid
StringFromGUID2
CoInitialize
CoUninitialize
CoCreateInstance
CoSetProxyBlanket

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39311d491d5ff058b4e856cef61ef76c

Headers

File Characteristics

Imports

rpcrt4

shlwapi

shell32

kernel32

user32

ole32

advapi32

Sections

.text Size: 165KB - Virtual size: 165KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 22KB

.crt Size: 512B - Virtual size: 84KB

.text
Size: 165KB - Virtual size: 165KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 22KB

.crt
Size: 512B - Virtual size: 84KB