5cdbed3eca181293c6fe07466d7da607_JaffaCakes118

General

Target

5cdbed3eca181293c6fe07466d7da607_JaffaCakes118
Size

192KB
MD5

5cdbed3eca181293c6fe07466d7da607
SHA1

144d7403490e5b1f2d04ad362c5fb57bb3245e61
SHA256

ca105d4435ae08f09b432ec6aa591286aadedd3c087da97944a4f8ad2079db5f
SHA512

b4e3511e072f6dce79756f26584f777a7ad1551d4b77f89d3a3307febd015022f7995322d27d52b375be02f733864bef166c2a4d42afe1bc135237f6416d38d6
SSDEEP

3072:uj1ttSnYT3+TG4cJBhACHs5kisWuTJ8kFQfaCQ6Hx2CmcnT7HNmhv4lZZnNI1VS2:uj1t4Sh4JCHAkisWuN8kUhQqZjT7Sv4T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cdbed3eca181293c6fe07466d7da607_JaffaCakes118

Files

5cdbed3eca181293c6fe07466d7da607_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fe65fa865ff69fb3f41975adcf38e35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

rpcrt4

UuidCreate

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

user32

GetClassLongA
MessageBoxW

kernel32

WriteFile
HeapAlloc
WriteConsoleA
LCMapStringW
ReadFile
HeapReAlloc
GetThreadPriority
SetUnhandledExceptionFilter
LCMapStringA
HeapFree
GetModuleHandleA
InterlockedIncrement
MultiByteToWideChar
EnterCriticalSection
SetCommConfig
GetCPInfo
GetProcAddress
GetFullPathNameW
GetVersionExA
InterlockedDecrement
GetLastError
IsValidLocale
RaiseException
InitializeCriticalSection
GlobalAlloc
WideCharToMultiByte
SetEndOfFile
GetCurrentThreadId
GetConsoleOutputCP
SetStdHandle
EnumResourceNamesA
ExitProcess
GetCurrentDirectoryW
IsDebuggerPresent
EnumSystemLocalesA
ExitProcess
GetCurrentProcess
RtlUnwind
GetCommandLineA
UnhandledExceptionFilter
LeaveCriticalSection
GetModuleFileNameW
HeapSize
CloseHandle
Sleep
GetUserDefaultLCID
CreateFileA
GetProcessHeap
TerminateProcess
DeleteCriticalSection
GetLocaleInfoW
IsValidCodePage
WriteConsoleW
GetFullPathNameA

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fe65fa865ff69fb3f41975adcf38e35

Headers

File Characteristics

Imports

advapi32

rpcrt4

shell32

user32

kernel32

Sections

.text Size: 164KB - Virtual size: 163KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 24KB - Virtual size: 24KB

.crt Size: 512B - Virtual size: 84KB

.text
Size: 164KB - Virtual size: 163KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 24KB - Virtual size: 24KB

.crt
Size: 512B - Virtual size: 84KB