33a7b2f17606857cde226c4da25c4a2d_JaffaCakes118

General

Target

33a7b2f17606857cde226c4da25c4a2d_JaffaCakes118
Size

162KB
MD5

33a7b2f17606857cde226c4da25c4a2d
SHA1

3c6844de1cfbc715d72321a4c587c8d3ef95cee9
SHA256

a12640d39f0dec48e50f75068dc7be8f87073725f27493151f76eb6a1c27c0a8
SHA512

d7f8cb99f28ca77f23ae34c283d16b15b11813d7bb39a23cc215cacbcd3f67e3dcb471f71cff99127c6395719a8eb893d2871e594bc68f26a7d4b4b1cea7c2a4
SSDEEP

3072:KcRVBrdcMdKSbBFd0F4Ix215Fo70GoDtJO9VXqGzJBRfH:tPyBSbB7Ix2po70tO9koRfH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33a7b2f17606857cde226c4da25c4a2d_JaffaCakes118

Files

33a7b2f17606857cde226c4da25c4a2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38873715a7f99c8e9b349f5a6cf3bcd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetClassLongA
MessageBoxW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

rpcrt4

UuidCreate

kernel32

WriteConsoleW
DeleteCriticalSection
EnumSystemLocalesA
IsValidLocale
WriteFile
TerminateProcess
GetThreadPriority
UnhandledExceptionFilter
GetModuleHandleA
IsValidCodePage
HeapSize
GlobalAlloc
GetCurrentProcess
LCMapStringA
SetCommConfig
IsDebuggerPresent
GetConsoleOutputCP
ExitProcess
HeapAlloc
GetCommandLineA
GetCPInfo
Sleep
CloseHandle
InitializeCriticalSection
GetModuleFileNameW
WideCharToMultiByte
EnumResourceNamesA
ReadFile
GetProcessHeap
GetLocaleInfoW
InterlockedDecrement
HeapReAlloc
EnterCriticalSection
RaiseException
InterlockedIncrement
HeapFree
LCMapStringW
GetCurrentThreadId
GetUserDefaultLCID
SetStdHandle
ExitProcess
MultiByteToWideChar
RtlUnwind
WriteConsoleA
SetUnhandledExceptionFilter
GetLastError
LeaveCriticalSection
CreateFileA
SetEndOfFile
GetProcAddress
GetVersionExA
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38873715a7f99c8e9b349f5a6cf3bcd2

Headers

File Characteristics

Imports

user32

shell32

advapi32

rpcrt4

kernel32

Sections

.text Size: 131KB - Virtual size: 131KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 27KB - Virtual size: 27KB

.crt Size: 512B - Virtual size: 76KB

.text
Size: 131KB - Virtual size: 131KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 27KB - Virtual size: 27KB

.crt
Size: 512B - Virtual size: 76KB