98f44c312a1176892510c64c19a15c38_JaffaCakes118

General

Target

98f44c312a1176892510c64c19a15c38_JaffaCakes118
Size

190KB
MD5

98f44c312a1176892510c64c19a15c38
SHA1

0bcd7c2e23f0348d52a5453dff4136cf2c25c40f
SHA256

bc14705e00d4b20d5095ba144bc4563900fc99308c74213c84107311bf64bc4c
SHA512

048e269ddc712996b53a3b80737304762745d622eda73f59c4b37824e6e3f7fdc69175c000df9d5e1fdcbd6b66bb72bb982de2c0dd328baff770be7d59ff3560
SSDEEP

3072:zNYd6QqnCGmY2SqRY+Ckd8PQfGPDZ5z4P3ZCiTuQ4WEYZr5Ud8ocMZzG7GZba:zmd6eY2SqR8PQfKYP3ZCouNW9UuSzG7G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98f44c312a1176892510c64c19a15c38_JaffaCakes118

Files

98f44c312a1176892510c64c19a15c38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f624a82a4ef5956dc9b2d7f794da7aa0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetTickCount
GetShortPathNameA
InterlockedIncrement
GetSystemTimeAsFileTime
GetACP
MultiByteToWideChar
GetThreadLocale
GetProcessHandleCount
InterlockedDecrement
lstrlenW
InitializeCriticalSection
CloseHandle
LeaveCriticalSection
GetLastError
IsBadReadPtr
CreateFileA
GetProcAddress
EnumResourceTypesA
QueryPerformanceCounter
lstrlenA
SetUnhandledExceptionFilter
InterlockedExchange
UnhandledExceptionFilter
GetLocaleInfoA
GetFileAttributesA
FreeLibrary
IsBadWritePtr
LoadLibraryA
WideCharToMultiByte
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
LocalFree
GetVersionExA

advapi32

RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA

user32

wsprintfA
wsprintfW

ole32

StgCreateDocfile
StgOpenStorage

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f624a82a4ef5956dc9b2d7f794da7aa0

Headers

File Characteristics

Imports

kernel32

advapi32

user32

ole32

setupapi

shell32

Sections

.text Size: 109KB - Virtual size: 109KB

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: 76KB - Virtual size: 76KB

.edata Size: 1024B - Virtual size: 112KB

.text
Size: 109KB - Virtual size: 109KB

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: 76KB - Virtual size: 76KB

.edata
Size: 1024B - Virtual size: 112KB