2b3c85b0f61ab3de280a2711e5cc801c_JaffaCakes118

General

Target

2b3c85b0f61ab3de280a2711e5cc801c_JaffaCakes118
Size

159KB
MD5

2b3c85b0f61ab3de280a2711e5cc801c
SHA1

424f79244eb877165a23cbe82a18d2a0b5397348
SHA256

94dd0812e4fb0e98f4a4456fcbee6fca039f6c52d1eb9a54f9b86a2af775a557
SHA512

b3e1579ef56bda3b5518fd2f1392efd38eedcd361a48a395371d82e4b61ff2dfd5685a25821cd0588ea674cf202bccbd045819f17c81e10f97a7639bc8b9ef0a
SSDEEP

3072:KD4UFxd9GeaUIDZyh/R7idbfzW7vJ5AGRegNQWFho1hhcYCcqv:I46tk7dnW7vJyGReMQGEhhcqqv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b3c85b0f61ab3de280a2711e5cc801c_JaffaCakes118

Files

2b3c85b0f61ab3de280a2711e5cc801c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f77022afb4cf2b133a3e5f1a32d550ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

CharNextW
TranslateMessage
GetMessageW
DispatchMessageW
GetDC
PostThreadMessageW
KillTimer
SendMessageA
CharUpperW
wsprintfW
SetTimer
UnregisterClassA

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

FindClose
lstrcpyA
MultiByteToWideChar
GlobalAlloc
GlobalFree
GetLastError
GetProcessId
lstrcmpiW
lstrcpyA
lstrlenW
EnumResourceNamesW
lstrcpyW
CreateFileMappingW
WideCharToMultiByte
GetACP
InitializeCriticalSection
FreeEnvironmentStringsW
GetTickCount
OutputDebugStringW
LockResource
GetCPInfo
GetModuleHandleW

shlwapi

PathCombineW
PathFileExistsW

advapi32

RegCloseKey
RegDeleteValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW

ole32

CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
StringFromCLSID

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f77022afb4cf2b133a3e5f1a32d550ec

Headers

File Characteristics

Imports

user32

oleacc

kernel32

shlwapi

advapi32

ole32

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 54KB - Virtual size: 54KB

.isete Size: 1024B - Virtual size: 96KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 54KB - Virtual size: 54KB

.isete
Size: 1024B - Virtual size: 96KB