3eb26a3f39ea816cea88afe6ece4fc48_JaffaCakes118

General

Target

3eb26a3f39ea816cea88afe6ece4fc48_JaffaCakes118
Size

372KB
MD5

3eb26a3f39ea816cea88afe6ece4fc48
SHA1

11f906ddbcbd665af5d35c142b311e3f1db66352
SHA256

2642c6a05eaaf9a0bd9ba27545318a3639c3b612acf91db1d790e6d4763cab76
SHA512

9aefeb1dd25a2d06212ab2733438b4d22dc9253d10635bfb5a959d1ad268dd4a58be46081dc83ac67d5415d0137820658be8c998ecd2fd45350a5ff15b196eee
SSDEEP

6144:uPWUckzjaF0RdoWPgmBXYSZgg2DuMhM2JIsJb4TBv/VT/AONzr:uuUZz40joWYmSlDtM2JIc4TRN/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eb26a3f39ea816cea88afe6ece4fc48_JaffaCakes118

Files

3eb26a3f39ea816cea88afe6ece4fc48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8da31eb3f08b0346c2431e5bfa6163b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetLastError
WriteFile
LoadResource
SetFileTime
CopyFileW
GetCurrentProcess
SetFilePointer
SetFileAttributesW
GetModuleFileNameW
GetFileTime
CreateFileW
GetFileAttributesW
CloseHandle
LoadLibraryW
GetModuleHandleW
ReadFile
GetProcAddress
ExitProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoW
GetVersionExA
HeapFree
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LCMapStringA
WideCharToMultiByte
LCMapStringW
LoadLibraryA
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo
GetLocaleInfoA
GetCPInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
HeapSize
FlushFileBuffers
GetACP
GetOEMCP

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8da31eb3f08b0346c2431e5bfa6163b0

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 324KB - Virtual size: 320KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 324KB - Virtual size: 320KB