2a0891e9f59a0aa7960835131be7dfb7_JaffaCakes118

General

Target

2a0891e9f59a0aa7960835131be7dfb7_JaffaCakes118
Size

197KB
MD5

2a0891e9f59a0aa7960835131be7dfb7
SHA1

ff71b2dd157333019dbe50a8ac78a6e6a1ffcce3
SHA256

d18cc4059c3417159e5ba907afb6807a79ebebeb6700458496810a21bb6b7980
SHA512

6041c1090b55c1aa873ae125f58b31c799edbe79f7bd8dd4722363f916b8230c980b8a3210cdedad565b4ba56e7325996d901294a81444c92925e0b95a84b7bb
SSDEEP

3072:KvCuqAY4YjMmwn72OcKy6zeDEA6Rg3V+jOPAtjdAmKntZZNYADkIPyeevA:GVA1QnzXw6u6OPAtjuptZZ2lIjev

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a0891e9f59a0aa7960835131be7dfb7_JaffaCakes118

Files

2a0891e9f59a0aa7960835131be7dfb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6657c48af173f61ba7a1b2b75d58944d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FillConsoleOutputCharacterA
LockResource
lstrlenW
GlobalAlloc
GetProcessWorkingSetSize
GetTickCount
GetACP
lstrcpyA
InitializeCriticalSection
FindClose
EnumResourceNamesA
WideCharToMultiByte
lstrcmpiW
GetLastError
lstrcpyW
FreeEnvironmentStringsW
GlobalFree
GetCPInfo
CreateFileMappingW
OutputDebugStringW
MultiByteToWideChar
GetModuleHandleW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoRevokeClassObject
CoUninitialize
CoTaskMemAlloc
CoRegisterClassObject
CoCreateInstance
StringFromGUID2
CoInitialize
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

CharNextW
KillTimer
CharUpperW
PostThreadMessageW
SendMessageA
TranslateMessage
SetTimer
wsprintfW
DispatchMessageW
GetMessageW
GetDC
UnregisterClassA

advapi32

RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteValueW
RegSetValueExW

shlwapi

PathCombineW
PathFileExistsW

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6657c48af173f61ba7a1b2b75d58944d

Headers

File Characteristics

Imports

kernel32

ole32

oleacc

user32

advapi32

shlwapi

Sections

.text Size: 121KB - Virtual size: 120KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 72KB - Virtual size: 72KB

.isete Size: 1024B - Virtual size: 84KB

.text
Size: 121KB - Virtual size: 120KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 72KB - Virtual size: 72KB

.isete
Size: 1024B - Virtual size: 84KB