eccf2bf05130ed659206efca9311b534_JaffaCakes118

General

Target

eccf2bf05130ed659206efca9311b534_JaffaCakes118
Size

83KB
MD5

eccf2bf05130ed659206efca9311b534
SHA1

06a662d9fc25f681f85a74a4acbe0b71cdd8b3bb
SHA256

da1de89d5b22beb226e5d17be563722a0fcee17bcd1e8fa74a66a86c570f8232
SHA512

ad98e0136b380b5c978664bb0895dadcdcb88d19f8f1ed7592615a9d356569ed2c238c40e2938541fdab5caca76b06b828a3fcafddd4abc0f3e66d33a673dd41
SSDEEP

1536:bXJ9pMOOenED3RCihQUC/b/zo49US7GpyCk6NJN9+Q:jJjKeEDhCihQU6M417Gg6NJN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eccf2bf05130ed659206efca9311b534_JaffaCakes118

Files

eccf2bf05130ed659206efca9311b534_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28959ef8618acc68befc6c4dd070af07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
AllocateAndInitializeSid
FreeSid
GetUserNameA
CheckTokenMembership
RegCloseKey

user32

GetSystemMetrics
GetDesktopWindow
wsprintfA
GetWindowRect
wsprintfW

ole32

CoCreateGuid
StringFromGUID2

ws2_32

WSAGetLastError
WSCInstallNameSpace
WSCUnInstallNameSpace
WSAStartup

kernel32

TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
lstrcpyA
DeleteFileA
CloseHandle
GetVersionExA
GetFileTime
LoadLibraryExA
GetModuleHandleA
GetSystemDefaultLangID
ExitProcess
GetComputerNameA
CreateFileA
FindResourceA
lstrlenA
lstrcpynA
FreeLibrary
LoadResource
HeapAlloc
GetCurrentProcess
HeapFree
WaitForSingleObject
VirtualFree
GetProcessHeap
SetFileTime
WriteFile
GetCommandLineA
GetSystemDirectoryW
WideCharToMultiByte
Sleep
SizeofResource
lstrcatA
GetACP
MultiByteToWideChar
GetProcAddress
VirtualAlloc
VerLanguageNameA
LockResource
GetSystemInfo
GetModuleFileNameA
RtlUnwind

shell32

ShellExecuteExA
SHFileOperationA
SHGetSpecialFolderPathA

gdi32

EnableEUDC

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28959ef8618acc68befc6c4dd070af07

Headers

File Characteristics

Imports

advapi32

user32

ole32

ws2_32

kernel32

shell32

gdi32

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 7KB

.CRT Size: 512B - Virtual size: 8B

.rsrc Size: 62KB - Virtual size: 62KB

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 7KB

.CRT
Size: 512B - Virtual size: 8B

.rsrc
Size: 62KB - Virtual size: 62KB