fe0e3a9780d81dd6ad30fb78a98432e8_JaffaCakes118

General

Target

fe0e3a9780d81dd6ad30fb78a98432e8_JaffaCakes118
Size

152KB
MD5

fe0e3a9780d81dd6ad30fb78a98432e8
SHA1

bdf2b48983c75cbcd23b67b9a94298e3429a4008
SHA256

86f2cee79da1d19845561591b63f9ad099cae6744415d6b88cd3de3deaf1acb5
SHA512

7ff67e0e3879e53ae2ea4ee43320fee4d506a597d942d3ab3a346601b8f2143064166933ef3ff58d22cbebb8beaece35230350450e36f4ac36ee556685df587a
SSDEEP

1536:K+3dYNoaDiHdlJbQYhs6x2Jkt+UqPPZGMJBuNUpvocIsXSzniEsvVD8zBmC5PDyC:z3dQLqRbhsHqTguNUJSsiznHo83P8E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe0e3a9780d81dd6ad30fb78a98432e8_JaffaCakes118

Files

fe0e3a9780d81dd6ad30fb78a98432e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7efdd0f2f8a2c7376dcc6f04ae9098e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ChangeDisplaySettingsA
MessageBoxA
ShowWindow
GetKeyNameTextA

advapi32

OpenProcessToken
OpenServiceA
OpenSCManagerA
LookupPrivilegeValueA
GetUserNameA

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID

kernel32

_llseek
VirtualUnlock
_lcreat
WinExec
lstrcatA
GlobalLock
LocalFileTimeToFileTime
GetConsoleMode
GlobalUnlock
CreateDirectoryA
DosDateTimeToFileTime
IsValidLocale
_lwrite
DosDateTimeToFileTime
GetUserDefaultUILanguage
CreateDirectoryA
GetCurrentDirectoryA
lstrcmpW
SetFileTime
GlobalAlloc
ExitProcess
SetCurrentDirectoryA
OpenMutexW
GetDriveTypeA
_lread
SetConsolePalette
SleepEx
FindFirstFileA
CreateDirectoryExA
GetTimeZoneInformation
lstrcpyA
GetModuleHandleW
GlobalHandle
QueryPerformanceFrequency
TlsSetValue
SetFileAttributesW
FindClose
_lopen
SetConsoleCursorInfo
GetVolumeInformationA
lstrlenA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text1
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f7efdd0f2f8a2c7376dcc6f04ae9098e

Headers

File Characteristics

Imports

user32

advapi32

ole32

kernel32

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 2KB - Virtual size: 1KB

.text1 Size: 136KB - Virtual size: 136KB

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 2KB - Virtual size: 1KB

.text1
Size: 136KB - Virtual size: 136KB