f475b2bff089a122d1a313957db86a8a_JaffaCakes118

General

Target

f475b2bff089a122d1a313957db86a8a_JaffaCakes118
Size

182KB
MD5

f475b2bff089a122d1a313957db86a8a
SHA1

58ed1dc4bc0de40b3a7fcc4d7e456f5c15c87883
SHA256

7dd48f2ea448e034c1282a4122fda59080175a68d6308717c8660b70bc2490e7
SHA512

2edb82b28ffe899d461ef95bb189eeef5567fd7523508050372caefa23fcb79ba45a348adc8690afd97b371cbbad413b112f0fc0f7cf6d1acb28e818896270b3
SSDEEP

3072:rYFNLfoK1Y9pmXnPGXFyc9ImActZbYKmAGpdrwhWMDhn8zFRyyB+Ydily8:r2zijEuVyc95cTAW48zFwl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f475b2bff089a122d1a313957db86a8a_JaffaCakes118

Files

f475b2bff089a122d1a313957db86a8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f26326ea36f7460b62330a5b41245eda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

rpcrt4

UuidCreate

user32

GetClassLongA
MessageBoxW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

kernel32

GetThreadPriority
GetUserDefaultLCID
GetCurrentThreadId
GetProcAddress
GetModuleFileNameW
HeapAlloc
HeapFree
SetEndOfFile
GetLocaleInfoW
GetCurrentDirectoryW
InterlockedIncrement
ReadFile
GetConsoleOutputCP
PurgeComm
InterlockedDecrement
CloseHandle
HeapReAlloc
WriteConsoleA
DeleteCriticalSection
IsDebuggerPresent
EnterCriticalSection
CreateFileA
EnumResourceNamesA
RaiseException
GetProcessHeap
LCMapStringA
LCMapStringW
WideCharToMultiByte
GetFullPathNameW
TerminateProcess
GetCommandLineA
UnhandledExceptionFilter
GetCurrentProcess
IsValidCodePage
LeaveCriticalSection
MultiByteToWideChar
GlobalAlloc
RtlUnwind
ExitProcess
ExitProcess
InitializeCriticalSection
SetUnhandledExceptionFilter
EnumSystemLocalesA
Sleep
IsValidLocale
GetVersionExA
GetModuleHandleA
SetStdHandle
GetCPInfo
GetLastError
WriteConsoleW
WriteFile
HeapSize
GetFullPathNameA

Sections

.text
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f26326ea36f7460b62330a5b41245eda

Headers

File Characteristics

Imports

advapi32

rpcrt4

user32

shell32

kernel32

Sections

.text Size: 155KB - Virtual size: 154KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 23KB - Virtual size: 23KB

.crt Size: 512B - Virtual size: 220KB

.text
Size: 155KB - Virtual size: 154KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 23KB - Virtual size: 23KB

.crt
Size: 512B - Virtual size: 220KB