5d22aaef7d25d0e06e0e6faf60cafefa_JaffaCakes118

General

Target

5d22aaef7d25d0e06e0e6faf60cafefa_JaffaCakes118
Size

23KB
MD5

5d22aaef7d25d0e06e0e6faf60cafefa
SHA1

fbcfd6e066e91820851041888d1dd1019091b30e
SHA256

70cd8e7e8e658ab1edb35b9c260e4dcc460d766a571b24fe4783923196fe85fc
SHA512

92166494b46af0b2dee1bfb4cdd5ba11542b2b1c18d7f250c06abef46c1ddb66b301263038c8b4f6786f8e17f0cb69c52914f3ea2d25e1b472cac53da385a01c
SSDEEP

384:WEds9QI9FWp7S1yzrd4Xyy7lU8V6JqDAWETNL7dGvI03ncO4OGW/xtyW5xqV+Wxy:o9napBziyCaKhmL5K/fZxbt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d22aaef7d25d0e06e0e6faf60cafefa_JaffaCakes118

Files

5d22aaef7d25d0e06e0e6faf60cafefa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

15b4e78e2152068099c6ca2c3c0a8481

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

__p__commode
_adjust_fdiv
_getch
exit
__p__fmode
_isatty
_stricmp
vfprintf
_XcptFilter
_wcsicmp
_exit
wcsrchr
wcscmp
swprintf
wcslen
_wcsnicmp
printf
memmove
wcscpy
wcscat
__getmainargs
__p___initenv
__set_app_type
_controlfp
_except_handler3
__setusermatherr
_initterm
_iob
atoi
tolower

advapi32

RegEnumValueW
RegQueryValueExW
RegSaveKeyW
RegOpenKeyExW
RegCreateKeyExW
RegSetKeySecurity
RegConnectRegistryW
RegOpenKeyW
RegCloseKey

kernel32

GetConsoleScreenBufferInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryW
GetProcessHeap
HeapFree
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
SetLastError
SetConsoleCtrlHandler
GetStdHandle
HeapAlloc

ntdll

RtlSubAuthoritySid
RtlFreeUnicodeString
RtlNtStatusToDosError
RtlFormatCurrentUserKeyPath
NtLoadKey
NtUnloadKey
NtOpenKey
RtlInitUnicodeString
RtlDosPathNameToNtPathName_U
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
NtClose
NtFlushKey
RtlAdjustPrivilege
RtlInitializeSid
RtlAllocateHeap
RtlLengthRequiredSid
RtlCopySid
RtlLengthSid

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

15b4e78e2152068099c6ca2c3c0a8481

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

ntdll

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 6KB - Virtual size: 5KB