4da1400dd5c0574a74c15f8c79839220_JaffaCakes118

General

Target

4da1400dd5c0574a74c15f8c79839220_JaffaCakes118
Size

192KB
MD5

4da1400dd5c0574a74c15f8c79839220
SHA1

5e8d690a63a35f169508056c77e69cfd1df5d01b
SHA256

d7bb38bfb8241c78b53539a447b63978572cea4c01bfb01dbe45f099ac5422e0
SHA512

238339da931183e43c8807b33f72358d66d5ac6be9c8ca31ebbf8c3bb5e227f5e2979324fcac3a94fdc4815f7a37a2da4c48d486fd262688876c53a6dbfd709f
SSDEEP

3072:uj1ttSnYT3+TG4cJBhACHs5kisWuTJ8kFQfaCQ6Hx2CmcnT7HNmhv4lZZnNI1VS2:uj1t4Sh4JCHAkisWuN8kUhQqZjT7Sv4T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4da1400dd5c0574a74c15f8c79839220_JaffaCakes118

Files

4da1400dd5c0574a74c15f8c79839220_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fe65fa865ff69fb3f41975adcf38e35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

rpcrt4

UuidCreate

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

user32

GetClassLongA
MessageBoxW

kernel32

WriteFile
HeapAlloc
WriteConsoleA
LCMapStringW
ReadFile
HeapReAlloc
GetThreadPriority
SetUnhandledExceptionFilter
LCMapStringA
HeapFree
GetModuleHandleA
InterlockedIncrement
MultiByteToWideChar
EnterCriticalSection
SetCommConfig
GetCPInfo
GetProcAddress
GetFullPathNameW
GetVersionExA
InterlockedDecrement
GetLastError
IsValidLocale
RaiseException
InitializeCriticalSection
GlobalAlloc
WideCharToMultiByte
SetEndOfFile
GetCurrentThreadId
GetConsoleOutputCP
SetStdHandle
EnumResourceNamesA
ExitProcess
GetCurrentDirectoryW
IsDebuggerPresent
EnumSystemLocalesA
ExitProcess
GetCurrentProcess
RtlUnwind
GetCommandLineA
UnhandledExceptionFilter
LeaveCriticalSection
GetModuleFileNameW
HeapSize
CloseHandle
Sleep
GetUserDefaultLCID
CreateFileA
GetProcessHeap
TerminateProcess
DeleteCriticalSection
GetLocaleInfoW
IsValidCodePage
WriteConsoleW
GetFullPathNameA

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fe65fa865ff69fb3f41975adcf38e35

Headers

File Characteristics

Imports

advapi32

rpcrt4

shell32

user32

kernel32

Sections

.text Size: 164KB - Virtual size: 163KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 24KB - Virtual size: 24KB

.crt Size: 512B - Virtual size: 84KB

.text
Size: 164KB - Virtual size: 163KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 24KB - Virtual size: 24KB

.crt
Size: 512B - Virtual size: 84KB