3491ae9ad344a5853c822d1a3a3e44b3_JaffaCakes118

General

Target

3491ae9ad344a5853c822d1a3a3e44b3_JaffaCakes118
Size

183KB
MD5

3491ae9ad344a5853c822d1a3a3e44b3
SHA1

9d240098b7a5ebee50b9d3a7a67df0dcc41007c0
SHA256

2e681e1133062c94fdccbd8a084635ee3345be34ba45ce45f859a29f9f049a1c
SHA512

f82e5993c75122b5625b03a33851ff8cce28b0063e4f8b951801620857485a1e9da1e2efdfb8aa4ae78da1df952ece6e18a6e17044bb5826bed4a7a5df812565
SSDEEP

3072:JvB1j0oCB82+uJUxR4i+t//26cMO2pJsZRjckQZnH2vMFfb6Ln+42EaiuBhESui6:JvB1030fxRKtn2fMOGJmRIk07Ffbr4Ln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3491ae9ad344a5853c822d1a3a3e44b3_JaffaCakes118

Files

3491ae9ad344a5853c822d1a3a3e44b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63689c9b7d66c9e10e85b90559942404

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

kernel32

SetStdHandle
UnhandledExceptionFilter
RaiseException
GetThreadPriority
IsDebuggerPresent
HeapFree
GetFullPathNameW
Sleep
InterlockedDecrement
WideCharToMultiByte
InterlockedIncrement
PurgeComm
GetCPInfo
TerminateProcess
GetVersionExA
GetCurrentDirectoryW
GetCommandLineA
GetModuleFileNameW
HeapAlloc
MultiByteToWideChar
GlobalAlloc
SetEndOfFile
CreateFileA
GetLastError
RtlUnwind
HeapReAlloc
WriteConsoleW
EnumResourceNamesA
CloseHandle
EnterCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetConsoleOutputCP
LeaveCriticalSection
GetLocaleInfoW
IsValidLocale
GetModuleHandleA
LCMapStringW
DeleteCriticalSection
GetUserDefaultLCID
IsValidCodePage
ExitProcess
GetProcessHeap
EnumSystemLocalesA
LCMapStringA
SetUnhandledExceptionFilter
HeapSize
WriteFile
GetProcAddress
WriteConsoleA
GetCurrentProcess
ExitProcess
ReadFile
GetFullPathNameA

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

user32

GetClassLongA
MessageBoxW

rpcrt4

UuidCreate

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63689c9b7d66c9e10e85b90559942404

Headers

File Characteristics

Imports

shell32

kernel32

advapi32

user32

rpcrt4

Sections

.text Size: 157KB - Virtual size: 156KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 23KB - Virtual size: 22KB

.crt Size: 512B - Virtual size: 216KB

.text
Size: 157KB - Virtual size: 156KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 23KB - Virtual size: 22KB

.crt
Size: 512B - Virtual size: 216KB