5d0ef7f0e66f0b015202036f3632d9a7_JaffaCakes118

General

Target

5d0ef7f0e66f0b015202036f3632d9a7_JaffaCakes118
Size

100KB
MD5

5d0ef7f0e66f0b015202036f3632d9a7
SHA1

fab0afd5071690e44502a046695acf17e0d48586
SHA256

85b3af08485db1596d9b4ef8db68f431e6065d6b29670981b11a14ad507ccd47
SHA512

df15961b9ca2606ef224f79e799f10806da87e2679ca1ec61d7500e04d36dc1aa485f63490cde04fe3ff54017d03902a7fd948b4d079b29927c267b6b0e1d546
SSDEEP

1536:4I1GXooCFridl+vRxQg0c/2rYBlO6tXWOuIZqGqz:40CooCFr1sAB1t5ZqD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d0ef7f0e66f0b015202036f3632d9a7_JaffaCakes118

Files

5d0ef7f0e66f0b015202036f3632d9a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

804f2c94c2f32ca65fefca4785088fee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
GetVersionExA
HeapReAlloc
lstrcpyA
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
LCMapStringW

user32

ChangeDisplaySettingsA
EnumDisplaySettingsA
MessageBoxA

advapi32

RegDeleteValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

804f2c94c2f32ca65fefca4785088fee

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 1KB

.srdata Size: 72KB - Virtual size: 72KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1KB

.srdata
Size: 72KB - Virtual size: 72KB