2ae994af9a91206dec9de216e700128a_JaffaCakes118

General

Target

2ae994af9a91206dec9de216e700128a_JaffaCakes118
Size

60KB
MD5

2ae994af9a91206dec9de216e700128a
SHA1

25f1952a48aab5f971e610edd306ea1634418939
SHA256

15c44e952b9d5529b3965eeada48f62fde063e3d6ee42bc7f8bd82677d28eabf
SHA512

134c2694a42a61f15245a2b070b8ecf34e2bba6750a1ff3ea24b1e5933284a6b5cc0d22d73e88e17406732cd6ff1dde844756de6e13d08bbe913d84b0ca61dba
SSDEEP

768:m16dnqoqfg4H+c0CDOm2Qsd1vcn7pAPgCKyFlRXsliRxaH2tW9g:ndqoqo6gCam2/dWn7KoPyFlRcliig

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae994af9a91206dec9de216e700128a_JaffaCakes118

Files

2ae994af9a91206dec9de216e700128a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4dfd4778a8701011d01a218e709cd00d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetWindowsDirectoryA
SetCurrentDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
SetFilePointer
DeleteFileA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetVersionExA
GetStdHandle
GetLastError
CloseHandle
MoveFileExA
HeapDestroy
WritePrivateProfileStringA
WriteFile
HeapCreate
VirtualFree
GetVersion
SetStdHandle
GetStringTypeA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetOEMCP
GetFileType
GetCPInfo
GetEnvironmentStringsW
GetACP
FlushFileBuffers
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LCMapStringA
WideCharToMultiByte
GetStringTypeW
SetHandleCount
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsW
LCMapStringW
ExitProcess
TerminateProcess
GetCurrentProcess

user32

MessageBoxA
FindWindowA

advapi32

RegCloseKey
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4dfd4778a8701011d01a218e709cd00d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 21KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 924B

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 21KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 924B