6abfb59c805c2f8b7977ab7ac36d2e84_JaffaCakes118

General

Target

6abfb59c805c2f8b7977ab7ac36d2e84_JaffaCakes118
Size

196KB
MD5

6abfb59c805c2f8b7977ab7ac36d2e84
SHA1

30358308dc29e1b710291682d9ca4b41f9fc1e1c
SHA256

cd19ece192606c780a7f9e2e9e54d4bc65320e2793e1249775515646e9d61dbc
SHA512

701273a9853251bdbcb64eaa651f60b225825679ba0986ccee96439d2b2f239aeb82c17af578d9447c237eae7b67d93166b424435218a5a372b6b017fbf37123
SSDEEP

3072:UYrMPR8KED7eKpXZIEapROlqHa0wVLw3PWTg7tGEIcEaEy5Et774Sz:UgMPR8KAxXepRmIwVLTTgBGErEz77n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6abfb59c805c2f8b7977ab7ac36d2e84_JaffaCakes118

Files

6abfb59c805c2f8b7977ab7ac36d2e84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a425ff24dbdcf5abd5c7307a920fe831

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateProcessW
CloseHandle
DeleteFileW
GetCurrentThreadId
GetTickCount
CopyFileW
SetFileAttributesA
GetFileAttributesA
GetCurrentProcessId
WriteConsoleA
lstrlenW
LocalAlloc
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
ReadFile
SetEndOfFile
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoW
GetVersion
GetLastError
WriteFile
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
WideCharToMultiByte
GetTimeZoneInformation
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
GetModuleFileNameA
SetEnvironmentVariableA

shlwapi

SHRegWriteUSValueW
SHRegCreateUSKeyW
SHRegCloseUSKey
PathFindFileNameW
StrToIntW
StrChrIW
StrCmpIW
StrCmpW
SHDeleteKeyW

ole32

OleUninitialize
CoInitialize
CLSIDFromString
OleInitialize

Sections

.text
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a425ff24dbdcf5abd5c7307a920fe831

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

ole32

Sections

.text Size: 164KB - Virtual size: 160KB

.data Size: 24KB - Virtual size: 115KB

.rsrc Size: 4KB - Virtual size: 808B

.text
Size: 164KB - Virtual size: 160KB

.data
Size: 24KB - Virtual size: 115KB

.rsrc
Size: 4KB - Virtual size: 808B