35df6d8b0192d4dd3c6944d0aadf7b84_JaffaCakes118

General

Target

35df6d8b0192d4dd3c6944d0aadf7b84_JaffaCakes118
Size

176KB
MD5

35df6d8b0192d4dd3c6944d0aadf7b84
SHA1

ecefe4111606437bb702c6cf195da55c5354a5fd
SHA256

c416af18fc874248525508fcb5bf66352dbebd12f94515210f544fa21ebab780
SHA512

185df71cca1b70cd964bc9fa760a05df6817b56f538b63584d05319e95acc01ea427a1abc8d4065e097a6dc578b490278434090158cd83e42982d627572fc129
SSDEEP

3072:7wbqKYJUz2rp2YLb+tye2FZGZu9ZTA44AM3vf6h1kCZEtd2g4Psp2:7wbqKYyK1L/+7EZ9lRDM/ih2yE6gf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35df6d8b0192d4dd3c6944d0aadf7b84_JaffaCakes118

Files

35df6d8b0192d4dd3c6944d0aadf7b84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ec46400c5b81491f3f01618ebbee53e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

user32

GetClassLongA
MessageBoxW

kernel32

EnumSystemLocalesA
GetConsoleOutputCP
GetProcessHeap
GetUserDefaultLCID
GetThreadPriority
GetLastError
TerminateProcess
WriteFile
GetModuleFileNameW
WideCharToMultiByte
GetCurrentProcess
EnterCriticalSection
InterlockedIncrement
IsValidCodePage
SetStdHandle
InterlockedDecrement
CreateFileA
GetCurrentDirectoryW
HeapFree
CloseHandle
SetCommConfig
ExitProcess
HeapSize
LCMapStringW
Sleep
MultiByteToWideChar
RaiseException
ReadFile
GetVersionExA
GetProcAddress
EnumResourceNamesA
HeapAlloc
LeaveCriticalSection
GetCurrentThreadId
GetFullPathNameW
InitializeCriticalSection
WriteConsoleA
GetModuleHandleA
LCMapStringA
DeleteCriticalSection
SetEndOfFile
ExitProcess
SetUnhandledExceptionFilter
IsValidLocale
WriteConsoleW
UnhandledExceptionFilter
HeapReAlloc
RtlUnwind
GlobalAlloc
GetCommandLineA
IsDebuggerPresent
GetLocaleInfoW
GetCPInfo
GetFullPathNameA

rpcrt4

UuidCreate

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ec46400c5b81491f3f01618ebbee53e

Headers

File Characteristics

Imports

advapi32

shell32

user32

kernel32

rpcrt4

Sections

.text Size: 152KB - Virtual size: 152KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 20KB - Virtual size: 20KB

.crt Size: 512B - Virtual size: 208KB

.text
Size: 152KB - Virtual size: 152KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 20KB - Virtual size: 20KB

.crt
Size: 512B - Virtual size: 208KB