22186cbc8fa4d0e190e3c77c4ec2ba1b_JaffaCakes118

General

Target

22186cbc8fa4d0e190e3c77c4ec2ba1b_JaffaCakes118
Size

163KB
MD5

22186cbc8fa4d0e190e3c77c4ec2ba1b
SHA1

cc2636c3048cb44c3189a0a9a0eca9ea4668032e
SHA256

bfdcb94cc46d3797975e4f948f4bdf1bb771444ee1e09b6b99d3e4cb8a99c16d
SHA512

0ea4b1ea6a9d6df20bec9a92b4f7dfd0ac7614f4d52e8e7c564d9c551919a934f779dfa782e16275d66f19003ff7728d5e190a399c3648445e2d2623bfa3095e
SSDEEP

3072:xkoW+zB4dtSTJo9jKsQtFkK2eRJUNiwqQY0mON6ItsgBIfAcVlLQNSJAwuY:QAeLKsQLkN+fQY0mONPlcTLQNK3uY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22186cbc8fa4d0e190e3c77c4ec2ba1b_JaffaCakes118

Files

22186cbc8fa4d0e190e3c77c4ec2ba1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd100fa2297aed64f5183d9e7fd59ee1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FillConsoleOutputCharacterA
lstrcpyA
lstrcmpiW
GetACP
GetProcessWorkingSetSize
FindClose
CreateFileMappingW
lstrcpyW
GetTickCount
LockResource
GlobalAlloc
OutputDebugStringW
MultiByteToWideChar
EnumResourceNamesA
lstrlenW
GetLastError
GlobalFree
FreeEnvironmentStringsW
WideCharToMultiByte
InitializeCriticalSection
GetCPInfo
GetModuleHandleW

advapi32

RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW

psapi

GetProcessMemoryInfo

ole32

CoTaskMemRealloc
StringFromGUID2
CoTaskMemAlloc
CoUninitialize
CoRegisterClassObject
CoCreateInstance
CoRevokeClassObject
CoTaskMemFree
CoInitialize
StringFromCLSID

gdi32

DeleteObject
SelectObject
CreateFontIndirectW
GetOutlineTextMetricsW
GetTextMetricsW
AddFontResourceExW

shell32

SHGetFileInfoW

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

CharNextW
GetDC
KillTimer
CharUpperW
SetTimer
PostThreadMessageW
wsprintfW
TranslateMessage
GetMessageW
DispatchMessageW
GetWindowLongA
UnregisterClassA

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd100fa2297aed64f5183d9e7fd59ee1

Headers

File Characteristics

Imports

kernel32

advapi32

psapi

ole32

gdi32

shell32

oleacc

user32

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 60KB - Virtual size: 59KB

.isete Size: 1024B - Virtual size: 248KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 60KB - Virtual size: 59KB

.isete
Size: 1024B - Virtual size: 248KB