JaffaCakes118_7a207802c8eacab81b672facbf127122

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_7a207802c8eacab81b672facbf127122
Size

297KB
MD5

7a207802c8eacab81b672facbf127122
SHA1

a82e7b94f7d375d05d644ff50268c88c2c12a6f8
SHA256

36e4baf9c8e901de5b7ce72133658fea4c524a402c757701e2845d506964c664
SHA512

3da762521bdc33143b410a1b4109c7bdf37045580e9911c4ea835d49004c300de369eec6fa10d4b63b11b4c724bc184af5346af6d5e0329b71757da849baffac
SSDEEP

6144:a/jHJp+I6rxKnayF83Jc5t6apeS1Er/WROyIi:abpp4xKnaj3Jc55pR2mOyIi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7a207802c8eacab81b672facbf127122

Files

JaffaCakes118_7a207802c8eacab81b672facbf127122
.exe windows:4 windows x86 arch:x86

d62cd0b56b855be54aea21a963a8ee60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

user32

EqualRect
GetDC
ReleaseDC
SystemParametersInfoA
GetSysColor
CharNextW
IsCharAlphaNumericA
LoadCursorA
GetSystemMetrics
GetDoubleClickTime

kernel32

FindResourceExW
CreateMutexA
DeleteFileW
LoadResource
ReleaseMutex
LocalAlloc
lstrlenW
HeapReAlloc
HeapSize
SizeofResource
CopyFileW
GetModuleHandleA
LocalFree
GetUserDefaultLangID
GetModuleHandleW
DeleteFileA
FindResourceW
WaitForSingleObject
HeapFree
HeapDestroy
FindFirstFileA
IsDBCSLeadByte
GetCurrentDirectoryW
GetFullPathNameW
GetSystemTimeAsFileTime
GetCurrentThreadId
IsProcessorFeaturePresent
DeleteCriticalSection
FindClose
EnterCriticalSection
RaiseException
UnhandledExceptionFilter
IsDebuggerPresent
GetFullPathNameA
LockResource
lstrlenA
GetProcessHeap
CloseHandle
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
HeapAlloc
SetUnhandledExceptionFilter
GetCurrentDirectoryA
IsValidLocale
VirtualAllocEx
lstrcmpA

oleaut32

SysStringByteLen
VariantInit
VarBstrCmp
SysFreeString
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
RegisterTypeLi
UnRegisterTypeLi
VariantChangeType
SysStringLen
VarBstrCat

gdi32

GetDeviceCaps
CreatePen
CreateSolidBrush

shlwapi

PathFileExistsW
PathCanonicalizeW
PathRenameExtensionW
PathIsRelativeW
PathRemoveFileSpecW
PathStripToRootW
PathIsURLW

security

ExportSecurityContext
UnsealMessage
AddSecurityPackageA
MakeSignature

uniplat

UnimodemNotifyTSP
StopMonitorThread

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 261KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d62cd0b56b855be54aea21a963a8ee60

Headers

File Characteristics

Imports

ole32

advapi32

user32

kernel32

oleaut32

gdi32

shlwapi

security

uniplat

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 261KB - Virtual size: 264KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 261KB - Virtual size: 264KB

.rsrc
Size: 10KB - Virtual size: 10KB