21f82cba9379671eeaaa899c0fb69e86_JaffaCakes118

General

Target

21f82cba9379671eeaaa899c0fb69e86_JaffaCakes118
Size

180KB
MD5

21f82cba9379671eeaaa899c0fb69e86
SHA1

cae7f9d4c1bfb3f5c8cec2e5ebe29cc14610a86a
SHA256

4287b32612333498fee28c8cd2296610c572a7257e2dd9fbe03a9b7fd4d36d62
SHA512

1e791f891824849961279467a2e23c934643d2f205d9dd94a3845cadd19ed3be5b272da1cad1df218fee4f01112455e059116f26e6d980b72f4a66f357537daf
SSDEEP

3072:jd8fKmDjut4wewB5ZyT0r7dyS85o3uEwoGpDaeBHUXglFxSUNav9v7:jjt4wewrZtr7ISao+zNB0QIRD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f82cba9379671eeaaa899c0fb69e86_JaffaCakes118

Files

21f82cba9379671eeaaa899c0fb69e86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9716abfc380de22dfddb4b7610ed574

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ole32

CoInitialize
CoCreateInstance
StringFromGUID2
CoUninitialize
CoCreateGuid
CoSetProxyBlanket

kernel32

GetThreadPriority
GetVersionExA
GetLastError
WriteConsoleW
GetUserDefaultLCID
CloseHandle
EnumSystemLocalesA
Sleep
InitializeCriticalSection
GetModuleHandleA
IsDebuggerPresent
WideCharToMultiByte
SetStdHandle
CreateFileA
GetCurrentDirectoryW
GetProcessHeap
UnhandledExceptionFilter
HeapAlloc
GetCommandLineA
SetCommConfig
GetCurrentThreadId
LCMapStringA
TerminateProcess
WriteConsoleA
EnumResourceNamesA
GetProcAddress
InterlockedDecrement
WriteFile
ReadFile
SetUnhandledExceptionFilter
HeapSize
ExitProcess
MultiByteToWideChar
HeapFree
GetFullPathNameW
RaiseException
SetEndOfFile
ExitProcess
GetCPInfo
GetCurrentProcess
GetLocaleInfoW
GlobalAlloc
LeaveCriticalSection
HeapReAlloc
IsValidLocale
GetModuleFileNameW
LCMapStringW
GetConsoleOutputCP
RtlUnwind
DeleteCriticalSection
IsValidCodePage
InterlockedIncrement
EnterCriticalSection
GetFullPathNameA

user32

GetClassLongA
MessageBoxW

rpcrt4

UuidCreate

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9716abfc380de22dfddb4b7610ed574

Headers

File Characteristics

Imports

ole32

kernel32

user32

rpcrt4

shell32

advapi32

Sections

.text Size: 148KB - Virtual size: 148KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 28KB - Virtual size: 27KB

.crt Size: 512B - Virtual size: 220KB

.text
Size: 148KB - Virtual size: 148KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 28KB - Virtual size: 27KB

.crt
Size: 512B - Virtual size: 220KB