5ead803ca2e248245782f67290437bf5_JaffaCakes118

General

Target

5ead803ca2e248245782f67290437bf5_JaffaCakes118
Size

191KB
MD5

5ead803ca2e248245782f67290437bf5
SHA1

a6375634a0c75d2ad4d942d524068c2715600cd0
SHA256

14ba310802e6a6a8179993d7f482056a6227cca642caa5572ee21037d69f4ef1
SHA512

2bcc75473da0e49e31f13fccaec23cf0aee36d6bd9a1646be58b4169f1143187513db882e243b71bed1c802b08c564ee732b9f6401dc92f242e54a448edc79f5
SSDEEP

3072:c2XlyS2hZ1rjsQRnxY6fGqjUu/Oj09cLyHlEbW+Ko6FXUiLK4QqCkj9y19g5:fKZVjjRnRuEvmecLym2oQXjrQP8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ead803ca2e248245782f67290437bf5_JaffaCakes118

Files

5ead803ca2e248245782f67290437bf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a5983e95c4176fbe27b892d2e9b4b39d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

CommandLineToArgvW

user32

CharNextA
MonitorFromWindow
wsprintfW
CharNextW

msvfw32

ICInfo

kernel32

GetFullPathNameA
CreateFiberEx
GetFullPathNameW
GetFileAttributesW
RemoveDirectoryW
DebugBreak
LoadLibraryExA
UpdateResourceW
CopyFileA
EscapeCommFunction
DeleteFileW
RemoveDirectoryA
SetFileAttributesA
AreFileApisANSI
GetFileAttributesA
GetOEMCP
FindClose
lstrlenA
ReadFile
EnumResourceNamesW
CreateDirectoryW
EndUpdateResourceW
OutputDebugStringA
FatalExit
SetFileAttributesW
CopyFileW
CreateDirectoryA
BeginUpdateResourceW
FreeLibrary
DeleteFileA
LoadLibraryExW
GetFileInformationByHandle

imagehlp

ImageGetDigestStream
ImageRvaToVa
ImageNtHeader
ImageDirectoryEntryToData

psapi

GetProcessMemoryInfo

advapi32

CryptCreateHash
CryptHashData
CryptReleaseContext
CryptAcquireContextA
CryptGetHashParam
CryptDestroyHash

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5983e95c4176fbe27b892d2e9b4b39d

Headers

File Characteristics

Imports

shell32

user32

msvfw32

kernel32

imagehlp

psapi

advapi32

Sections

.text Size: 167KB - Virtual size: 166KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 20KB - Virtual size: 20KB

.lib Size: 512B - Virtual size: 220KB

.text
Size: 167KB - Virtual size: 166KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 20KB - Virtual size: 20KB

.lib
Size: 512B - Virtual size: 220KB